blob: 4237503d7943f0ac7a1a28b0af198a062a1c4d96 [file] [log] [blame]
Matthias Andreas Benkard761cb732020-01-25 05:52:34 +01001quarkus.log.console.color = true
2
Matthias Andreas Benkardf5a24e42020-02-15 18:40:36 +01003quarkus.log.level = INFO
4#quarkus.log.category."org.hibernate".level = INFO
5#quarkus.log.category."io.quarkus.oidc".level = FINEST
6#quarkus.log.category."io.quarkus.vertx".level = FINEST
7#quarkus.log.category."io.vertx.ext.auth.oauth2".level = FINEST
8#quarkus.log.category."io.vertx.ext.jwt".level = FINEST
9
Matthias Andreas Benkard04a50e62020-02-16 19:08:38 +010010mulkcms.tag-base = hub.benkard.de
11
Matthias Andreas Benkard2f0b3702020-01-12 15:46:34 +010012quarkus.datasource.driver = org.postgresql.Driver
13quarkus.datasource.max-size = 8
14quarkus.datasource.min-size = 0
15
16#quarkus.flyway.migrate-at-start = true
17#quarkus.flyway.baseline-on-migrate = true
18#quarkus.flyway.baseline-version = 1
19#quarkus.flyway.schemas = public
20
Matthias Andreas Benkard9222efa2020-01-24 19:11:24 +010021%dev.quarkus.datasource.url = jdbc:postgresql://localhost:5432/mulkcms
Matthias Andreas Benkard2f0b3702020-01-12 15:46:34 +010022%dev.quarkus.datasource.username = mulk
23%dev.quarkus.datasource.password =
Matthias Andreas Benkard9222efa2020-01-24 19:11:24 +010024%dev.quarkus.hibernate-orm.log.sql = true
Matthias Andreas Benkard24a25142020-01-24 13:25:54 +010025
Matthias Andreas Benkard8b35def2020-01-31 19:13:01 +010026%prod.quarkus.datasource.url = jdbc:postgresql://postgresql.system:5432/mulkcms
27%prod.quarkus.datasource.username = mulkcms
28%prod.quarkus.datasource.password =
29%prod.quarkus.hibernate-orm.log.sql = false
30
Matthias Andreas Benkardc27d1cb2020-01-26 11:11:24 +010031# Authentication
Matthias Andreas Benkard24a25142020-01-24 13:25:54 +010032quarkus.oidc.auth-server-url = https://login.benkard.de/auth/realms/master
33quarkus.oidc.client-id = mulkcms
34quarkus.oidc.application-type = web-app
Matthias Andreas Benkard984a77b2020-02-02 15:41:51 +010035quarkus.oidc.token.principal-claim = preferred_username
Matthias Andreas Benkarda6ac2a32020-02-15 18:40:20 +010036quarkus.oidc.authentication.redirect-path = /oidc/login
Matthias Andreas Benkardc27d1cb2020-01-26 11:11:24 +010037
38quarkus.security.users.file.enabled = false
39quarkus.security.users.embedded.enabled = false
40
41# Authentication (dev)
42%dev.quarkus.oidc.enabled = false
43%dev.quarkus.security.users.embedded.enabled = true
44%dev.quarkus.security.users.embedded.plain-text = true
45%dev.quarkus.security.users.embedded.users.mulk = mulk
46%dev.quarkus.security.users.embedded.roles.mulk = Admin
Matthias Andreas Benkard8b35def2020-01-31 19:13:01 +010047
Matthias Andreas Benkard2a1383f2020-02-01 23:53:17 +010048# Session cookies
49quarkus.smallrye-jwt.enabled = false
50mp.jwt.verify.publickey.location = META-INF/resources/jwt-signing-public-key.pem
51mp.jwt.verify.issuer = https://matthias.benkard.de
52smallrye.jwt.token.header = Cookie
53smallrye.jwt.token.cookie = Bearer
54smallrye.jwt.require.named-principal = true
55%dev.mulkcms.jwt.keystore.file = example-keys.p12
56%prod.mulkcms.jwt.keystore.file = /secrets/keys.p12
57mulkcms.jwt.keystore.passphrase = 123456
58mulkcms.jwt.signing-key = MulkCMS-IdP
59mulkcms.jwt.issuer = https://matthias.benkard.de
60mulkcms.jwt.validity = P1D
61
Matthias Andreas Benkard8b35def2020-01-31 19:13:01 +010062# Deployment
63docker.registry = docker.benkard.de
64
65kubernetes.deployment.target = kubernetes
66kubernetes.group = mulk
67kubernetes.name = mulkcms2
68kubernetes.namespace = mulk
69kubernetes.service-type = ClusterIP
70kubernetes.image-pull-policy = Always
71kubernetes.headless = true
72kubernetes.service-account = default
73kubernetes.env-vars[0].name = QUARKUS_DATASOURCE_PASSWORD
74kubernetes.env-vars[0].secret = mulkcms2-secrets
75kubernetes.env-vars[0].value = database-password
Matthias Andreas Benkard2a1383f2020-02-01 23:53:17 +010076kubernetes.env-vars[1].name = QUARKUS_OIDC_CREDENTIALS_SECRET
77kubernetes.env-vars[1].secret = mulkcms2-secrets
78kubernetes.env-vars[1].value = keycloak-secret
79kubernetes.secret-volumes[0].volume-name = secrets
80kubernetes.secret-volumes[0].secret-name = mulkcms2-secrets
81kubernetes.secret-volumes[0].default-mode = 0444
82kubernetes.mounts[0].name = secrets
83kubernetes.mounts[0].path = /secrets
84kubernetes.mounts[0].read-only = true