blob: 107d1b6eabdc0a83084de7e9f39af6b5eaefd7c6 [file] [log] [blame]
Matthias Andreas Benkardf5a24e42020-02-15 18:40:36 +01001quarkus.log.level = INFO
2#quarkus.log.category."org.hibernate".level = INFO
3#quarkus.log.category."io.quarkus.oidc".level = FINEST
4#quarkus.log.category."io.quarkus.vertx".level = FINEST
5#quarkus.log.category."io.vertx.ext.auth.oauth2".level = FINEST
6#quarkus.log.category."io.vertx.ext.jwt".level = FINEST
7
Matthias Andreas Benkard04a50e62020-02-16 19:08:38 +01008mulkcms.tag-base = hub.benkard.de
Matthias Andreas Benkard4940b292020-03-29 18:41:07 +02009mulkcms.posts.default-max-results = 25
Matthias Andreas Benkardba3e58c2020-11-01 12:58:35 +010010mulkcms.newsletter.time-zone = Europe/Vienna
Matthias Andreas Benkard04a50e62020-02-16 19:08:38 +010011
Matthias Andreas Benkardc7997aa2020-08-29 10:52:44 +020012quarkus.datasource.db-kind = postgresql
13quarkus.datasource.jdbc.driver = org.postgresql.Driver
14quarkus.datasource.jdbc.max-size = 8
15quarkus.datasource.jdbc.min-size = 0
Matthias Andreas Benkard2f0b3702020-01-12 15:46:34 +010016
Matthias Andreas Benkardf544d732022-05-07 21:02:46 +020017quarkus.hibernate-orm.validate-in-dev-mode = false
Matthias Andreas Benkardab36adb2022-03-20 16:10:42 +010018
Matthias Andreas Benkard80fc4312020-06-13 16:59:04 +020019quarkus.liquibase.migrate-at-start = true
Matthias Andreas Benkard2f0b3702020-01-12 15:46:34 +010020
Matthias Andreas Benkardc7997aa2020-08-29 10:52:44 +020021%dev.quarkus.datasource.jdbc.url = jdbc:postgresql://localhost:5432/mulkcms
Matthias Andreas Benkard2f0b3702020-01-12 15:46:34 +010022%dev.quarkus.datasource.username = mulk
23%dev.quarkus.datasource.password =
Matthias Andreas Benkard9222efa2020-01-24 19:11:24 +010024%dev.quarkus.hibernate-orm.log.sql = true
Matthias Andreas Benkard24a25142020-01-24 13:25:54 +010025
Matthias Andreas Benkardc7997aa2020-08-29 10:52:44 +020026%prod.quarkus.datasource.jdbc.url = jdbc:postgresql://postgresql.system:5432/mulkcms
Matthias Andreas Benkard8b35def2020-01-31 19:13:01 +010027%prod.quarkus.datasource.username = mulkcms
28%prod.quarkus.datasource.password =
29%prod.quarkus.hibernate-orm.log.sql = false
30
Matthias Andreas Benkardc27d1cb2020-01-26 11:11:24 +010031# Authentication
Matthias Andreas Benkard4d8139f2020-09-10 15:39:10 +020032quarkus.http.auth.proactive = true
33
Matthias Andreas Benkard24a25142020-01-24 13:25:54 +010034quarkus.oidc.auth-server-url = https://login.benkard.de/auth/realms/master
Matthias Andreas Benkard46022ab2021-07-17 21:29:32 +020035quarkus.oidc.authentication.force-redirect-https-scheme = true
Matthias Andreas Benkard24a25142020-01-24 13:25:54 +010036quarkus.oidc.client-id = mulkcms
37quarkus.oidc.application-type = web-app
Matthias Andreas Benkard984a77b2020-02-02 15:41:51 +010038quarkus.oidc.token.principal-claim = preferred_username
Matthias Andreas Benkard85b5e262020-03-28 19:50:44 +010039quarkus.oidc.authentication.cookie-path = /
Matthias Andreas Benkarddb9941b2023-09-06 13:52:40 +020040quarkus.oidc.authentication.redirect-path = /posts
41quarkus.oidc.authentication.restore-path-after-redirect = true
Matthias Andreas Benkardc27d1cb2020-01-26 11:11:24 +010042
43quarkus.security.users.file.enabled = false
44quarkus.security.users.embedded.enabled = false
45
46# Authentication (dev)
47%dev.quarkus.oidc.enabled = false
48%dev.quarkus.security.users.embedded.enabled = true
49%dev.quarkus.security.users.embedded.plain-text = true
50%dev.quarkus.security.users.embedded.users.mulk = mulk
51%dev.quarkus.security.users.embedded.roles.mulk = Admin
Matthias Andreas Benkard8b35def2020-01-31 19:13:01 +010052
Matthias Andreas Benkard2a1383f2020-02-01 23:53:17 +010053# Session cookies
54quarkus.smallrye-jwt.enabled = false
55mp.jwt.verify.publickey.location = META-INF/resources/jwt-signing-public-key.pem
56mp.jwt.verify.issuer = https://matthias.benkard.de
57smallrye.jwt.token.header = Cookie
58smallrye.jwt.token.cookie = Bearer
59smallrye.jwt.require.named-principal = true
60%dev.mulkcms.jwt.keystore.file = example-keys.p12
61%prod.mulkcms.jwt.keystore.file = /secrets/keys.p12
62mulkcms.jwt.keystore.passphrase = 123456
63mulkcms.jwt.signing-key = MulkCMS-IdP
64mulkcms.jwt.issuer = https://matthias.benkard.de
65mulkcms.jwt.validity = P1D
66
Matthias Andreas Benkardba3e58c2020-11-01 12:58:35 +010067# E-mail settings
Matthias Andreas Benkardbe86a622021-02-06 07:29:52 +010068quarkus.mailer.from = MulkCMS <mulkcms@benkard.de>
Matthias Andreas Benkardba3e58c2020-11-01 12:58:35 +010069quarkus.mailer.host = mail.benkard.de
70quarkus.mailer.port = 587
71quarkus.mailer.start-tls = REQUIRED
72quarkus.mailer.username = mulkcms@benkard.de
Matthias Andreas Benkardff358942020-11-03 06:16:17 +010073mulkcms.imap.port = 993
74
75%dev.quarkus.mailer.host = mail.benkard.de
Matthias Andreas Benkardbe86a622021-02-06 07:29:52 +010076%dev.quarkus.mailer.from = MulkCMS <test@benkard.de>
Matthias Andreas Benkardff358942020-11-03 06:16:17 +010077%dev.quarkus.mailer.username = test@benkard.de
78%dev.quarkus.mailer.password = test
Matthias Andreas Benkardba3e58c2020-11-01 12:58:35 +010079
Matthias Andreas Benkard8b35def2020-01-31 19:13:01 +010080# Deployment
81docker.registry = docker.benkard.de
82
Matthias Andreas Benkarde2d42e92020-06-16 21:08:30 +020083quarkus.container-image.build = false
84quarkus.container-image.push = false
Matthias Andreas Benkarddb48be42020-04-17 21:44:59 +020085quarkus.container-image.group = mulk
86quarkus.container-image.name = mulkcms2
87quarkus.container-image.registry = docker.benkard.de
88
Matthias Andreas Benkardc83e8de2022-05-13 15:25:56 +020089quarkus.jib.base-jvm-image = docker.benkard.de/mulk/openjdk-runtime:latest
Matthias Andreas Benkardcc29e552021-01-22 14:47:29 +010090quarkus.jib.jvm-arguments = -XX:G1PeriodicGCInterval=300000,-XX:G1PeriodicGCSystemLoadThreshold=0
Matthias Andreas Benkarddb48be42020-04-17 21:44:59 +020091
Matthias Andreas Benkard5e5e70a2020-04-18 06:29:22 +020092quarkus.native.container-runtime = docker
93
Matthias Andreas Benkard8b35def2020-01-31 19:13:01 +010094kubernetes.deployment.target = kubernetes
95kubernetes.group = mulk
96kubernetes.name = mulkcms2
97kubernetes.namespace = mulk
98kubernetes.service-type = ClusterIP
99kubernetes.image-pull-policy = Always
100kubernetes.headless = true
101kubernetes.service-account = default
102kubernetes.env-vars[0].name = QUARKUS_DATASOURCE_PASSWORD
103kubernetes.env-vars[0].secret = mulkcms2-secrets
104kubernetes.env-vars[0].value = database-password
Matthias Andreas Benkard2a1383f2020-02-01 23:53:17 +0100105kubernetes.env-vars[1].name = QUARKUS_OIDC_CREDENTIALS_SECRET
106kubernetes.env-vars[1].secret = mulkcms2-secrets
107kubernetes.env-vars[1].value = keycloak-secret
Matthias Andreas Benkardba3e58c2020-11-01 12:58:35 +0100108kubernetes.env-vars[2].name = QUARKUS_MAILER_PASSWORD
109kubernetes.env-vars[2].secret = mulkcms2-secrets
110kubernetes.env-vars[2].value = email-password
Matthias Andreas Benkard2a1383f2020-02-01 23:53:17 +0100111kubernetes.secret-volumes[0].volume-name = secrets
112kubernetes.secret-volumes[0].secret-name = mulkcms2-secrets
113kubernetes.secret-volumes[0].default-mode = 0444
114kubernetes.mounts[0].name = secrets
115kubernetes.mounts[0].path = /secrets
116kubernetes.mounts[0].read-only = true