blob: 3d56d21daf280c0f75e0d919dc918e781f904248 [file] [log] [blame]
Matthias Andreas Benkard761cb732020-01-25 05:52:34 +01001quarkus.log.console.color = true
2
Matthias Andreas Benkardf5a24e42020-02-15 18:40:36 +01003quarkus.log.level = INFO
4#quarkus.log.category."org.hibernate".level = INFO
5#quarkus.log.category."io.quarkus.oidc".level = FINEST
6#quarkus.log.category."io.quarkus.vertx".level = FINEST
7#quarkus.log.category."io.vertx.ext.auth.oauth2".level = FINEST
8#quarkus.log.category."io.vertx.ext.jwt".level = FINEST
9
Matthias Andreas Benkard04a50e62020-02-16 19:08:38 +010010mulkcms.tag-base = hub.benkard.de
Matthias Andreas Benkard4940b292020-03-29 18:41:07 +020011mulkcms.posts.default-max-results = 25
Matthias Andreas Benkard04a50e62020-02-16 19:08:38 +010012
Matthias Andreas Benkardc7997aa2020-08-29 10:52:44 +020013quarkus.datasource.db-kind = postgresql
14quarkus.datasource.jdbc.driver = org.postgresql.Driver
15quarkus.datasource.jdbc.max-size = 8
16quarkus.datasource.jdbc.min-size = 0
Matthias Andreas Benkard2f0b3702020-01-12 15:46:34 +010017
Matthias Andreas Benkard80fc4312020-06-13 16:59:04 +020018quarkus.liquibase.migrate-at-start = true
Matthias Andreas Benkard2f0b3702020-01-12 15:46:34 +010019
Matthias Andreas Benkardc7997aa2020-08-29 10:52:44 +020020%dev.quarkus.datasource.jdbc.url = jdbc:postgresql://localhost:5432/mulkcms
Matthias Andreas Benkard2f0b3702020-01-12 15:46:34 +010021%dev.quarkus.datasource.username = mulk
22%dev.quarkus.datasource.password =
Matthias Andreas Benkard9222efa2020-01-24 19:11:24 +010023%dev.quarkus.hibernate-orm.log.sql = true
Matthias Andreas Benkard24a25142020-01-24 13:25:54 +010024
Matthias Andreas Benkardc7997aa2020-08-29 10:52:44 +020025%prod.quarkus.datasource.jdbc.url = jdbc:postgresql://postgresql.system:5432/mulkcms
Matthias Andreas Benkard8b35def2020-01-31 19:13:01 +010026%prod.quarkus.datasource.username = mulkcms
27%prod.quarkus.datasource.password =
28%prod.quarkus.hibernate-orm.log.sql = false
29
Matthias Andreas Benkardc27d1cb2020-01-26 11:11:24 +010030# Authentication
Matthias Andreas Benkard4d8139f2020-09-10 15:39:10 +020031quarkus.http.auth.proactive = true
32
Matthias Andreas Benkard24a25142020-01-24 13:25:54 +010033quarkus.oidc.auth-server-url = https://login.benkard.de/auth/realms/master
34quarkus.oidc.client-id = mulkcms
35quarkus.oidc.application-type = web-app
Matthias Andreas Benkard984a77b2020-02-02 15:41:51 +010036quarkus.oidc.token.principal-claim = preferred_username
Matthias Andreas Benkard85b5e262020-03-28 19:50:44 +010037quarkus.oidc.authentication.cookie-path = /
Matthias Andreas Benkard551f50c2020-03-15 12:34:07 +010038#quarkus.oidc.authentication.redirect-path = /oidc/login
Matthias Andreas Benkardc27d1cb2020-01-26 11:11:24 +010039
40quarkus.security.users.file.enabled = false
41quarkus.security.users.embedded.enabled = false
42
43# Authentication (dev)
44%dev.quarkus.oidc.enabled = false
45%dev.quarkus.security.users.embedded.enabled = true
46%dev.quarkus.security.users.embedded.plain-text = true
47%dev.quarkus.security.users.embedded.users.mulk = mulk
48%dev.quarkus.security.users.embedded.roles.mulk = Admin
Matthias Andreas Benkard8b35def2020-01-31 19:13:01 +010049
Matthias Andreas Benkard2a1383f2020-02-01 23:53:17 +010050# Session cookies
51quarkus.smallrye-jwt.enabled = false
52mp.jwt.verify.publickey.location = META-INF/resources/jwt-signing-public-key.pem
53mp.jwt.verify.issuer = https://matthias.benkard.de
54smallrye.jwt.token.header = Cookie
55smallrye.jwt.token.cookie = Bearer
56smallrye.jwt.require.named-principal = true
57%dev.mulkcms.jwt.keystore.file = example-keys.p12
58%prod.mulkcms.jwt.keystore.file = /secrets/keys.p12
59mulkcms.jwt.keystore.passphrase = 123456
60mulkcms.jwt.signing-key = MulkCMS-IdP
61mulkcms.jwt.issuer = https://matthias.benkard.de
62mulkcms.jwt.validity = P1D
63
Matthias Andreas Benkard8b35def2020-01-31 19:13:01 +010064# Deployment
65docker.registry = docker.benkard.de
66
Matthias Andreas Benkarde2d42e92020-06-16 21:08:30 +020067quarkus.container-image.build = false
68quarkus.container-image.push = false
Matthias Andreas Benkarddb48be42020-04-17 21:44:59 +020069quarkus.container-image.group = mulk
70quarkus.container-image.name = mulkcms2
71quarkus.container-image.registry = docker.benkard.de
72
Matthias Andreas Benkard99904f12020-09-16 13:37:55 +020073quarkus.jib.base-jvm-image = openjdk:15-slim
Matthias Andreas Benkard24319ba2020-04-24 06:18:14 +020074#quarkus.jib.jvm-arguments = -XX:+UnlockExperimentalVMOptions,-XX:+UseShenandoahGC,-XX:ShenandoahGCHeuristics=compact
Matthias Andreas Benkarddb48be42020-04-17 21:44:59 +020075
Matthias Andreas Benkard5e5e70a2020-04-18 06:29:22 +020076quarkus.native.container-runtime = docker
77
Matthias Andreas Benkard8b35def2020-01-31 19:13:01 +010078kubernetes.deployment.target = kubernetes
79kubernetes.group = mulk
80kubernetes.name = mulkcms2
81kubernetes.namespace = mulk
82kubernetes.service-type = ClusterIP
83kubernetes.image-pull-policy = Always
84kubernetes.headless = true
85kubernetes.service-account = default
86kubernetes.env-vars[0].name = QUARKUS_DATASOURCE_PASSWORD
87kubernetes.env-vars[0].secret = mulkcms2-secrets
88kubernetes.env-vars[0].value = database-password
Matthias Andreas Benkard2a1383f2020-02-01 23:53:17 +010089kubernetes.env-vars[1].name = QUARKUS_OIDC_CREDENTIALS_SECRET
90kubernetes.env-vars[1].secret = mulkcms2-secrets
91kubernetes.env-vars[1].value = keycloak-secret
92kubernetes.secret-volumes[0].volume-name = secrets
93kubernetes.secret-volumes[0].secret-name = mulkcms2-secrets
94kubernetes.secret-volumes[0].default-mode = 0444
95kubernetes.mounts[0].name = secrets
96kubernetes.mounts[0].path = /secrets
97kubernetes.mounts[0].read-only = true