diff --git a/group_vars/authelia/vault.yml b/group_vars/authelia/vault.yml index 194dae0..84bff3e 100644 --- a/group_vars/authelia/vault.yml +++ b/group_vars/authelia/vault.yml @@ -32,6 +32,27 @@ authelia_users: 39643130343932643561653830353733633234656338313465313031353463313732 groups: - users +wikijs_uuid: !vault | + $ANSIBLE_VAULT;1.1;AES256 + 62303565643064643732353839373834353436363532313538303231623765363632663361666364 + 6631326465643739353130656132303462333530656236300a646630383964353235346136393961 + 34343363613138373566613539396130303539353335383934306231373634313831383135613439 + 3636626464323035620a633435623664306461616363346665336134363138646232353132653265 + 30643533396436303536646638633633313539316133653336343931613363313737636366653331 + 3734323836363861306638373262343035313938626132366664 +wikijs_client_secret: !vault | + $ANSIBLE_VAULT;1.1;AES256 + 64656630646633666130653734633463366364363035363238323539303731326261363230636431 + 6661353065636435653638623262366331633465616333640a313966366631396366346532306431 + 65333037303665373434613632303062613133383631333963366435313562643439613130353065 + 3430303561656335300a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authelia_jwt_secret: !vault | $ANSIBLE_VAULT;1.1;AES256 34306239616233393235376564646464613833313332353365666264663735656536663133643736 diff --git a/roles/authelia/templates/configuration.yml.j2 b/roles/authelia/templates/configuration.yml.j2 index 5af324c..5c0d2e7 100644 --- a/roles/authelia/templates/configuration.yml.j2 +++ b/roles/authelia/templates/configuration.yml.j2 @@ -77,4 +77,24 @@ identity_providers: - openid - profile - email - userinfo_signed_response_alg: none \ No newline at end of file + userinfo_signed_response_alg: none + - client_id: wikijs + client_name: Wiki + client_secret: {{ wikijs_client_secret }} + public: false + authorization_policy: 'two_factor' + require_pkce: false + pkce_challenge_method: '' + redirect_uris: + - 'https://wikijs.{{ authelia_domain }}/login/{{ wikijs_uuid }}/callback' # Note this must be copied during step 7 of the Application configuration. + scopes: + - 'openid' + - 'profile' + - 'email' + response_types: + - 'code' + grant_types: + - 'authorization_code' + access_token_signed_response_alg: 'none' + userinfo_signed_response_alg: 'none' + token_endpoint_auth_method: 'client_secret_post' \ No newline at end of file