iamthefij/homelab-nomad
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add oidc to photoprism

Browse Source
This commit is contained in:
IamTheFij 2024-06-28 12:37:45 -07:00
parent e99c5272cc
commit fafbb246ff
2 changed files with 10 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
ansible_playbooks/vars/nomad_vars.sample.yml
View File

@ -116,6 +116,7 @@ nomad/jobs/photoprism:
db_name: VALUE db_name: VALUE
db_pass: VALUE db_pass: VALUE
db_user: VALUE db_user: VALUE
oidc_secret: VALUE
nomad/jobs/postgres-server: nomad/jobs/postgres-server:
superuser: VALUE superuser: VALUE
superuser_pass: VALUE superuser_pass: VALUE

15
services/photoprism.tf
View File

@ -2,7 +2,7 @@ module "photoprism_module" {
source = "./service" source = "./service"
name = "photoprism" name = "photoprism"
image = "photoprism/photoprism:240531" image = "photoprism/photoprism:240711"
image_pull_timeout = "10m" image_pull_timeout = "10m"
# constraints = [{ # constraints = [{
# attribute = "$${meta.hw_transcode.type}" # attribute = "$${meta.hw_transcode.type}"
@ -37,9 +37,6 @@ module "photoprism_module" {
ingress = true ingress = true
service_port = 2342 service_port = 2342
use_wesher = var.use_wesher use_wesher = var.use_wesher
ingress_middlewares = [
"authelia@nomad"
]
mysql_bootstrap = { mysql_bootstrap = {
enabled = true enabled = true
@ -47,8 +44,6 @@ module "photoprism_module" {
env = { env = {
PHOTOPRISM_DEBUG = true PHOTOPRISM_DEBUG = true
# Make public since we added Authelia at the proxy level
PHOTOPRISM_AUTH_MODE = "public"
# UI # UI
PHOTOPRISM_SITE_CAPTION = "AI-Powered Photos App" PHOTOPRISM_SITE_CAPTION = "AI-Powered Photos App"
PHOTOPRISM_SITE_DESCRIPTION = "Fijolek home photos" PHOTOPRISM_SITE_DESCRIPTION = "Fijolek home photos"
@ -66,6 +61,12 @@ module "photoprism_module" {
PHOTOPRISM_UID = 500 PHOTOPRISM_UID = 500
PHOTOPRISM_GID = 100 PHOTOPRISM_GID = 100
PHOTOPRISM_UMASK = 0000 PHOTOPRISM_UMASK = 0000
# OIDC
PHOTOPRISM_OIDC_URI = "https://authelia.thefij.rocks"
PHOTOPRISM_OIDC_PROVIDER = "Authelia"
PHOTOPRISM_OIDC_REGISTER = true
PHOTOPRISM_OIDC_REDIRECT = false
PHOTOPRISM_OIDC_SCOPES = "openid email profile"
} }
templates = [ templates = [
@ -79,6 +80,8 @@ module "photoprism_module" {
PHOTOPRISM_DATABASE_USER={{ .db_user }} PHOTOPRISM_DATABASE_USER={{ .db_user }}
PHOTOPRISM_DATABASE_PASSWORD={{ .db_pass }} PHOTOPRISM_DATABASE_PASSWORD={{ .db_pass }}
PHOTOPRISM_DATABASE_SERVER=127.0.0.1:3306 PHOTOPRISM_DATABASE_SERVER=127.0.0.1:3306
PHOTOPRISM_OIDC_CLIENT=photoprism
PHOTOPRISM_OIDC_SECRET={{ .oidc_secret }}
{{- end }} {{- end }}
{{ if eq (env "meta.hw_transcode.type") "raspberry" -}} {{ if eq (env "meta.hw_transcode.type") "raspberry" -}}
PHOTOPRISM_FFMPEG_ENCODER=raspberry PHOTOPRISM_FFMPEG_ENCODER=raspberry