Matthias Andreas Benkard | f5a24e4 | 2020-02-15 18:40:36 +0100 | [diff] [blame] | 1 | quarkus.log.level = INFO |
| 2 | #quarkus.log.category."org.hibernate".level = INFO |
| 3 | #quarkus.log.category."io.quarkus.oidc".level = FINEST |
| 4 | #quarkus.log.category."io.quarkus.vertx".level = FINEST |
| 5 | #quarkus.log.category."io.vertx.ext.auth.oauth2".level = FINEST |
| 6 | #quarkus.log.category."io.vertx.ext.jwt".level = FINEST |
| 7 | |
Matthias Andreas Benkard | 04a50e6 | 2020-02-16 19:08:38 +0100 | [diff] [blame] | 8 | mulkcms.tag-base = hub.benkard.de |
Matthias Andreas Benkard | 4940b29 | 2020-03-29 18:41:07 +0200 | [diff] [blame] | 9 | mulkcms.posts.default-max-results = 25 |
Matthias Andreas Benkard | ba3e58c | 2020-11-01 12:58:35 +0100 | [diff] [blame] | 10 | mulkcms.newsletter.time-zone = Europe/Vienna |
Matthias Andreas Benkard | 04a50e6 | 2020-02-16 19:08:38 +0100 | [diff] [blame] | 11 | |
Matthias Andreas Benkard | c7997aa | 2020-08-29 10:52:44 +0200 | [diff] [blame] | 12 | quarkus.datasource.db-kind = postgresql |
| 13 | quarkus.datasource.jdbc.driver = org.postgresql.Driver |
| 14 | quarkus.datasource.jdbc.max-size = 8 |
| 15 | quarkus.datasource.jdbc.min-size = 0 |
Matthias Andreas Benkard | 2f0b370 | 2020-01-12 15:46:34 +0100 | [diff] [blame] | 16 | |
Matthias Andreas Benkard | f544d73 | 2022-05-07 21:02:46 +0200 | [diff] [blame] | 17 | quarkus.hibernate-orm.validate-in-dev-mode = false |
Matthias Andreas Benkard | ab36adb | 2022-03-20 16:10:42 +0100 | [diff] [blame] | 18 | |
Matthias Andreas Benkard | 80fc431 | 2020-06-13 16:59:04 +0200 | [diff] [blame] | 19 | quarkus.liquibase.migrate-at-start = true |
Matthias Andreas Benkard | 2f0b370 | 2020-01-12 15:46:34 +0100 | [diff] [blame] | 20 | |
Matthias Andreas Benkard | c7997aa | 2020-08-29 10:52:44 +0200 | [diff] [blame] | 21 | %dev.quarkus.datasource.jdbc.url = jdbc:postgresql://localhost:5432/mulkcms |
Matthias Andreas Benkard | 2f0b370 | 2020-01-12 15:46:34 +0100 | [diff] [blame] | 22 | %dev.quarkus.datasource.username = mulk |
| 23 | %dev.quarkus.datasource.password = |
Matthias Andreas Benkard | 9222efa | 2020-01-24 19:11:24 +0100 | [diff] [blame] | 24 | %dev.quarkus.hibernate-orm.log.sql = true |
Matthias Andreas Benkard | 24a2514 | 2020-01-24 13:25:54 +0100 | [diff] [blame] | 25 | |
Matthias Andreas Benkard | c7997aa | 2020-08-29 10:52:44 +0200 | [diff] [blame] | 26 | %prod.quarkus.datasource.jdbc.url = jdbc:postgresql://postgresql.system:5432/mulkcms |
Matthias Andreas Benkard | 8b35def | 2020-01-31 19:13:01 +0100 | [diff] [blame] | 27 | %prod.quarkus.datasource.username = mulkcms |
| 28 | %prod.quarkus.datasource.password = |
| 29 | %prod.quarkus.hibernate-orm.log.sql = false |
| 30 | |
Matthias Andreas Benkard | c27d1cb | 2020-01-26 11:11:24 +0100 | [diff] [blame] | 31 | # Authentication |
Matthias Andreas Benkard | 4d8139f | 2020-09-10 15:39:10 +0200 | [diff] [blame] | 32 | quarkus.http.auth.proactive = true |
| 33 | |
Matthias Andreas Benkard | 24a2514 | 2020-01-24 13:25:54 +0100 | [diff] [blame] | 34 | quarkus.oidc.auth-server-url = https://login.benkard.de/auth/realms/master |
Matthias Andreas Benkard | 46022ab | 2021-07-17 21:29:32 +0200 | [diff] [blame] | 35 | quarkus.oidc.authentication.force-redirect-https-scheme = true |
Matthias Andreas Benkard | 24a2514 | 2020-01-24 13:25:54 +0100 | [diff] [blame] | 36 | quarkus.oidc.client-id = mulkcms |
| 37 | quarkus.oidc.application-type = web-app |
Matthias Andreas Benkard | 984a77b | 2020-02-02 15:41:51 +0100 | [diff] [blame] | 38 | quarkus.oidc.token.principal-claim = preferred_username |
Matthias Andreas Benkard | 85b5e26 | 2020-03-28 19:50:44 +0100 | [diff] [blame] | 39 | quarkus.oidc.authentication.cookie-path = / |
Matthias Andreas Benkard | 551f50c | 2020-03-15 12:34:07 +0100 | [diff] [blame] | 40 | #quarkus.oidc.authentication.redirect-path = /oidc/login |
Matthias Andreas Benkard | c27d1cb | 2020-01-26 11:11:24 +0100 | [diff] [blame] | 41 | |
| 42 | quarkus.security.users.file.enabled = false |
| 43 | quarkus.security.users.embedded.enabled = false |
| 44 | |
| 45 | # Authentication (dev) |
| 46 | %dev.quarkus.oidc.enabled = false |
| 47 | %dev.quarkus.security.users.embedded.enabled = true |
| 48 | %dev.quarkus.security.users.embedded.plain-text = true |
| 49 | %dev.quarkus.security.users.embedded.users.mulk = mulk |
| 50 | %dev.quarkus.security.users.embedded.roles.mulk = Admin |
Matthias Andreas Benkard | 8b35def | 2020-01-31 19:13:01 +0100 | [diff] [blame] | 51 | |
Matthias Andreas Benkard | 2a1383f | 2020-02-01 23:53:17 +0100 | [diff] [blame] | 52 | # Session cookies |
| 53 | quarkus.smallrye-jwt.enabled = false |
| 54 | mp.jwt.verify.publickey.location = META-INF/resources/jwt-signing-public-key.pem |
| 55 | mp.jwt.verify.issuer = https://matthias.benkard.de |
| 56 | smallrye.jwt.token.header = Cookie |
| 57 | smallrye.jwt.token.cookie = Bearer |
| 58 | smallrye.jwt.require.named-principal = true |
| 59 | %dev.mulkcms.jwt.keystore.file = example-keys.p12 |
| 60 | %prod.mulkcms.jwt.keystore.file = /secrets/keys.p12 |
| 61 | mulkcms.jwt.keystore.passphrase = 123456 |
| 62 | mulkcms.jwt.signing-key = MulkCMS-IdP |
| 63 | mulkcms.jwt.issuer = https://matthias.benkard.de |
| 64 | mulkcms.jwt.validity = P1D |
| 65 | |
Matthias Andreas Benkard | ba3e58c | 2020-11-01 12:58:35 +0100 | [diff] [blame] | 66 | # E-mail settings |
Matthias Andreas Benkard | be86a62 | 2021-02-06 07:29:52 +0100 | [diff] [blame] | 67 | quarkus.mailer.from = MulkCMS <mulkcms@benkard.de> |
Matthias Andreas Benkard | ba3e58c | 2020-11-01 12:58:35 +0100 | [diff] [blame] | 68 | quarkus.mailer.host = mail.benkard.de |
| 69 | quarkus.mailer.port = 587 |
| 70 | quarkus.mailer.start-tls = REQUIRED |
| 71 | quarkus.mailer.username = mulkcms@benkard.de |
Matthias Andreas Benkard | ff35894 | 2020-11-03 06:16:17 +0100 | [diff] [blame] | 72 | mulkcms.imap.port = 993 |
| 73 | |
| 74 | %dev.quarkus.mailer.host = mail.benkard.de |
Matthias Andreas Benkard | be86a62 | 2021-02-06 07:29:52 +0100 | [diff] [blame] | 75 | %dev.quarkus.mailer.from = MulkCMS <test@benkard.de> |
Matthias Andreas Benkard | ff35894 | 2020-11-03 06:16:17 +0100 | [diff] [blame] | 76 | %dev.quarkus.mailer.username = test@benkard.de |
| 77 | %dev.quarkus.mailer.password = test |
Matthias Andreas Benkard | ba3e58c | 2020-11-01 12:58:35 +0100 | [diff] [blame] | 78 | |
Matthias Andreas Benkard | 8b35def | 2020-01-31 19:13:01 +0100 | [diff] [blame] | 79 | # Deployment |
| 80 | docker.registry = docker.benkard.de |
| 81 | |
Matthias Andreas Benkard | e2d42e9 | 2020-06-16 21:08:30 +0200 | [diff] [blame] | 82 | quarkus.container-image.build = false |
| 83 | quarkus.container-image.push = false |
Matthias Andreas Benkard | db48be4 | 2020-04-17 21:44:59 +0200 | [diff] [blame] | 84 | quarkus.container-image.group = mulk |
| 85 | quarkus.container-image.name = mulkcms2 |
| 86 | quarkus.container-image.registry = docker.benkard.de |
| 87 | |
Matthias Andreas Benkard | c83e8de | 2022-05-13 15:25:56 +0200 | [diff] [blame] | 88 | quarkus.jib.base-jvm-image = docker.benkard.de/mulk/openjdk-runtime:latest |
Matthias Andreas Benkard | cc29e55 | 2021-01-22 14:47:29 +0100 | [diff] [blame] | 89 | quarkus.jib.jvm-arguments = -XX:G1PeriodicGCInterval=300000,-XX:G1PeriodicGCSystemLoadThreshold=0 |
Matthias Andreas Benkard | db48be4 | 2020-04-17 21:44:59 +0200 | [diff] [blame] | 90 | |
Matthias Andreas Benkard | 5e5e70a | 2020-04-18 06:29:22 +0200 | [diff] [blame] | 91 | quarkus.native.container-runtime = docker |
| 92 | |
Matthias Andreas Benkard | 8b35def | 2020-01-31 19:13:01 +0100 | [diff] [blame] | 93 | kubernetes.deployment.target = kubernetes |
| 94 | kubernetes.group = mulk |
| 95 | kubernetes.name = mulkcms2 |
| 96 | kubernetes.namespace = mulk |
| 97 | kubernetes.service-type = ClusterIP |
| 98 | kubernetes.image-pull-policy = Always |
| 99 | kubernetes.headless = true |
| 100 | kubernetes.service-account = default |
| 101 | kubernetes.env-vars[0].name = QUARKUS_DATASOURCE_PASSWORD |
| 102 | kubernetes.env-vars[0].secret = mulkcms2-secrets |
| 103 | kubernetes.env-vars[0].value = database-password |
Matthias Andreas Benkard | 2a1383f | 2020-02-01 23:53:17 +0100 | [diff] [blame] | 104 | kubernetes.env-vars[1].name = QUARKUS_OIDC_CREDENTIALS_SECRET |
| 105 | kubernetes.env-vars[1].secret = mulkcms2-secrets |
| 106 | kubernetes.env-vars[1].value = keycloak-secret |
Matthias Andreas Benkard | ba3e58c | 2020-11-01 12:58:35 +0100 | [diff] [blame] | 107 | kubernetes.env-vars[2].name = QUARKUS_MAILER_PASSWORD |
| 108 | kubernetes.env-vars[2].secret = mulkcms2-secrets |
| 109 | kubernetes.env-vars[2].value = email-password |
Matthias Andreas Benkard | 2a1383f | 2020-02-01 23:53:17 +0100 | [diff] [blame] | 110 | kubernetes.secret-volumes[0].volume-name = secrets |
| 111 | kubernetes.secret-volumes[0].secret-name = mulkcms2-secrets |
| 112 | kubernetes.secret-volumes[0].default-mode = 0444 |
| 113 | kubernetes.mounts[0].name = secrets |
| 114 | kubernetes.mounts[0].path = /secrets |
| 115 | kubernetes.mounts[0].read-only = true |