guillaume
/
ansible-keycloak
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Use absolute path for certificate files

main
Xabier Davila 2022-06-30 16:22:58 +02:00
parent 065fb53eb2
commit 41caa49cfc
4 changed files with 8 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
roles/keycloak_quarkus/README.md
View File

@ -37,8 +37,8 @@ Role Defaults
|`keycloak_quarkus_http_relative_path` | Service context path | `auth` | |`keycloak_quarkus_http_relative_path` | Service context path | `auth` |
|`keycloak_quarkus_http_enabled`| Enable listener on HTTP port | `True` | |`keycloak_quarkus_http_enabled`| Enable listener on HTTP port | `True` |
|`keycloak_quarkus_https_enabled`| Enable listener on HTTPS port | `False` | |`keycloak_quarkus_https_enabled`| Enable listener on HTTPS port | `False` |
|`keycloak_quarkus_key_file`| The file path to a private key in PEM format | `conf/server.key.pem` | |`keycloak_quarkus_key_file`| The file path to a private key in PEM format | `{{ keycloak.home }}/conf/server.key.pem` |
|`keycloak_quarkus_cert_file`| The file path to a server certificate or certificate chain in PEM format | `conf/server.crt.pem` | |`keycloak_quarkus_cert_file`| The file path to a server certificate or certificate chain in PEM format | `{{ keycloak.home }}/conf/server.crt.pem` |
* Database configuration * Database configuration

4
roles/keycloak_quarkus/defaults/main.yml
View File

@ -36,8 +36,8 @@ keycloak_quarkus_java_opts: "-Xms1024m -Xmx2048m"
### TLS/HTTPS configuration ### TLS/HTTPS configuration
keycloak_quarkus_https_enabled: False keycloak_quarkus_https_enabled: False
keycloak_quarkus_key_file: conf/server.key.pem keycloak_quarkus_key_file: "{{ keycloak.home }}/conf/server.key.pem"
keycloak_quarkus_cert_file: conf/server.crt.pem keycloak_quarkus_cert_file: "{{ keycloak.home }}/conf/server.crt.pem"
### Enable configuration for database backend, clustering and remote caches on infinispan ### Enable configuration for database backend, clustering and remote caches on infinispan
keycloak_quarkus_ha_enabled: False keycloak_quarkus_ha_enabled: False

4
roles/keycloak_quarkus/meta/argument_specs.yml
View File

@ -108,11 +108,11 @@ argument_specs:
description: "Enable listener on HTTPS port" description: "Enable listener on HTTPS port"
type: "bool" type: "bool"
keycloak_quarkus_key_file: keycloak_quarkus_key_file:
default: "conf/server.key.pem" default: "{{ keycloak.home }}/conf/server.key.pem"
description: "The file path to a private key in PEM format" description: "The file path to a private key in PEM format"
type: "str" type: "str"
keycloak_quarkus_cert_file: keycloak_quarkus_cert_file:
default: "conf/server.crt.pem" default: "{{ keycloak.home }}/conf/server.crt.pem"
description: "The file path to a server certificate or certificate chain in PEM format" description: "The file path to a server certificate or certificate chain in PEM format"
type: "str" type: "str"
keycloak_quarkus_https_port: keycloak_quarkus_https_port:

4
roles/keycloak_quarkus/templates/keycloak.conf.j2
View File

@ -19,8 +19,8 @@ http-port={{ keycloak_quarkus_http_port }}
# HTTPS # HTTPS
https-port={{ keycloak_quarkus_https_port }} https-port={{ keycloak_quarkus_https_port }}
{% if keycloak_quarkus_https_enabled %} {% if keycloak_quarkus_https_enabled %}
https-certificate-file={{ keycloak.home }}/{{ keycloak_quarkus_cert_file}} https-certificate-file={{ keycloak_quarkus_cert_file}}
https-certificate-key-file={{ keycloak.home }}/{{ keycloak_quarkus_key_file }} https-certificate-key-file={{ keycloak_quarkus_key_file }}
{% endif %} {% endif %}
# Hostname for the Keycloak server. # Hostname for the Keycloak server.