Portfolio & fix grafana roles

This commit is contained in:
Brieuc Dubois 2023-10-20 17:47:06 +02:00
parent c22d47c049
commit 0b2a8904be
2 changed files with 23 additions and 1 deletions

View File

@ -0,0 +1,22 @@
services:
portfolio:
container_name: portfolio
image: nginx:latest
restart: unless-stopped
environment:
- TZ=Europe/Paris
volumes:
- $DATA/portfolio:/usr/share/nginx/html:ro
labels:
- "traefik.enable=true"
- "traefik.http.routers.portfolio.rule=Host(`portfolio.bhasher.com`)"
- "traefik.http.services.portfolio.loadbalancer.server.port=80"
- "traefik.http.routers.portfolio.tls=true"
- "traefik.http.routers.portfolio.tls.certresolver=http"
- "traefik.http.routers.portfolio.entrypoints=internalsecure"
networks:
- external
networks:
external:
external: true

View File

@ -57,7 +57,7 @@ services:
- GF_AUTH_GENERIC_OAUTH_GROUPS_ATTRIBUTE_PATH=groups
- GF_AUTH_GENERIC_OAUTH_NAME_ATTRIBUTE_PATH=name
- GF_AUTH_GENERIC_OAUTH_USE_PKCE=false
- GF_AUTH_GENERIC_OAUTH_ROLE_ATTRIBUTE_PATH=contains(roles[*], 'admin') && 'Admin' || 'Viewer'
- GF_AUTH_GENERIC_OAUTH_ROLE_ATTRIBUTE_PATH=contains(groups[*], 'admin') && 'Admin' || 'Viewer'
- GF_AUTH_GENERIC_OAUTH_GROUPS_PATH=groups
- GF_AUTH_GENERIC_OAUTH_ALLOWED_GROUPS=admin
- GF_AUTH_OAUTH_ALLOW_INSECURE_EMAIL_LOOKUP=true