guillaume
/
ansible-keycloak
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge pull request #39 from xabarin-forks/use_absolute_path_for_certs 

keycloak_quarkus: use absolute path for certificate files
main
Guido Grazioli 2022-07-05 14:06:02 +02:00 committed by GitHub
parent d47e045f5e adb0a4da45
commit 9252433cc8
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
5 changed files with 10 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
molecule/quarkus/converge.yml
View File

@ -9,8 +9,8 @@
keycloak_quarkus_http_relative_path: '' keycloak_quarkus_http_relative_path: ''
keycloak_quarkus_log: file keycloak_quarkus_log: file
keycloak_quarkus_https_enabled: True keycloak_quarkus_https_enabled: True
keycloak_quarkus_key_file: conf/key.pem keycloak_quarkus_key_file: "{{ keycloak.home }}/conf/key.pem"
keycloak_quarkus_cert_file: conf/cert.pem keycloak_quarkus_cert_file: "{{ keycloak.home }}/conf/cert.pem"
roles: roles:
- role: keycloak_quarkus - role: keycloak_quarkus
- role: keycloak_realm - role: keycloak_realm

4
roles/keycloak_quarkus/README.md
View File

@ -37,8 +37,8 @@ Role Defaults
|`keycloak_quarkus_http_relative_path` | Service context path | `auth` | |`keycloak_quarkus_http_relative_path` | Service context path | `auth` |
|`keycloak_quarkus_http_enabled`| Enable listener on HTTP port | `True` | |`keycloak_quarkus_http_enabled`| Enable listener on HTTP port | `True` |
|`keycloak_quarkus_https_enabled`| Enable listener on HTTPS port | `False` | |`keycloak_quarkus_https_enabled`| Enable listener on HTTPS port | `False` |
|`keycloak_quarkus_key_file`| The file path to a private key in PEM format | `conf/server.key.pem` | |`keycloak_quarkus_key_file`| The file path to a private key in PEM format | `{{ keycloak.home }}/conf/server.key.pem` |
|`keycloak_quarkus_cert_file`| The file path to a server certificate or certificate chain in PEM format | `conf/server.crt.pem` | |`keycloak_quarkus_cert_file`| The file path to a server certificate or certificate chain in PEM format | `{{ keycloak.home }}/conf/server.crt.pem` |
* Database configuration * Database configuration

4
roles/keycloak_quarkus/defaults/main.yml
View File

@ -36,8 +36,8 @@ keycloak_quarkus_java_opts: "-Xms1024m -Xmx2048m"
### TLS/HTTPS configuration ### TLS/HTTPS configuration
keycloak_quarkus_https_enabled: False keycloak_quarkus_https_enabled: False
keycloak_quarkus_key_file: conf/server.key.pem keycloak_quarkus_key_file: "{{ keycloak.home }}/conf/server.key.pem"
keycloak_quarkus_cert_file: conf/server.crt.pem keycloak_quarkus_cert_file: "{{ keycloak.home }}/conf/server.crt.pem"
### Enable configuration for database backend, clustering and remote caches on infinispan ### Enable configuration for database backend, clustering and remote caches on infinispan
keycloak_quarkus_ha_enabled: False keycloak_quarkus_ha_enabled: False

4
roles/keycloak_quarkus/meta/argument_specs.yml
View File

@ -108,11 +108,11 @@ argument_specs:
description: "Enable listener on HTTPS port" description: "Enable listener on HTTPS port"
type: "bool" type: "bool"
keycloak_quarkus_key_file: keycloak_quarkus_key_file:
default: "conf/server.key.pem" default: "{{ keycloak.home }}/conf/server.key.pem"
description: "The file path to a private key in PEM format" description: "The file path to a private key in PEM format"
type: "str" type: "str"
keycloak_quarkus_cert_file: keycloak_quarkus_cert_file:
default: "conf/server.crt.pem" default: "{{ keycloak.home }}/conf/server.crt.pem"
description: "The file path to a server certificate or certificate chain in PEM format" description: "The file path to a server certificate or certificate chain in PEM format"
type: "str" type: "str"
keycloak_quarkus_https_port: keycloak_quarkus_https_port:

4
roles/keycloak_quarkus/templates/keycloak.conf.j2
View File

@ -19,8 +19,8 @@ http-port={{ keycloak_quarkus_http_port }}
# HTTPS # HTTPS
https-port={{ keycloak_quarkus_https_port }} https-port={{ keycloak_quarkus_https_port }}
{% if keycloak_quarkus_https_enabled %} {% if keycloak_quarkus_https_enabled %}
https-certificate-file={{ keycloak.home }}/{{ keycloak_quarkus_cert_file}} https-certificate-file={{ keycloak_quarkus_cert_file}}
https-certificate-key-file={{ keycloak.home }}/{{ keycloak_quarkus_key_file }} https-certificate-key-file={{ keycloak_quarkus_key_file }}
{% endif %} {% endif %}
# Hostname for the Keycloak server. # Hostname for the Keycloak server.