mirror of
https://github.com/suitenumerique/drive.git
synced 2026-08-30 19:59:41 +02:00
Nathan Panchout
3731033f5b
Share invitation emails embedded `Site.domain` directly, producing schemeless links that mail clients failed to resolve. Introduce a `DJANGO_EMAIL_URL_APP` environment variable holding the app's absolute URL used when building invitation links, with a fallback on the current Site domain when unset. Wire it in dev env, helm dev values, the helm example and the env reference.
147 lines
4.9 KiB
YAML
147 lines
4.9 KiB
YAML
djangoSecretKey: &djangoSecretKey "lkjsdlfkjsldkfjslkdfjslkdjfslkdjf"
|
|
djangoSuperUserEmail: admin@example.com
|
|
djangoSuperUserPass: admin
|
|
oidc:
|
|
clientId: drive
|
|
clientSecret: ThisIsAnExampleKeyForDevPurposeOnly
|
|
|
|
image:
|
|
repository: lasuite/drive-backend
|
|
pullPolicy: Always
|
|
tag: "latest"
|
|
|
|
backend:
|
|
replicas: 1
|
|
envVars:
|
|
DJANGO_CSRF_TRUSTED_ORIGINS: https://drive.127.0.0.1.nip.io
|
|
DJANGO_CONFIGURATION: Feature
|
|
DJANGO_ALLOWED_HOSTS: drive.127.0.0.1.nip.io
|
|
DJANGO_SERVER_TO_SERVER_API_TOKENS: secret-api-key
|
|
DJANGO_SECRET_KEY: *djangoSecretKey
|
|
DJANGO_SETTINGS_MODULE: drive.settings
|
|
DJANGO_SUPERUSER_PASSWORD: admin
|
|
DJANGO_EMAIL_BRAND_NAME: "La Suite Numérique"
|
|
DJANGO_EMAIL_HOST: "mailcatcher"
|
|
DJANGO_EMAIL_LOGO_IMG: https://drive.127.0.0.1.nip.io/assets/logo-suite-numerique.png
|
|
DJANGO_EMAIL_PORT: 1025
|
|
DJANGO_EMAIL_URL_APP: https://drive.127.0.0.1.nip.io
|
|
DJANGO_EMAIL_USE_SSL: False
|
|
LOGGING_LEVEL_LOGGERS_ROOT: INFO
|
|
LOGGING_LEVEL_LOGGERS_APP: INFO
|
|
OIDC_OP_JWKS_ENDPOINT: https://drive-keycloak.127.0.0.1.nip.io/realms/drive/protocol/openid-connect/certs
|
|
OIDC_OP_AUTHORIZATION_ENDPOINT: https://drive-keycloak.127.0.0.1.nip.io/realms/drive/protocol/openid-connect/auth
|
|
OIDC_OP_TOKEN_ENDPOINT: https://drive-keycloak.127.0.0.1.nip.io/realms/drive/protocol/openid-connect/token
|
|
OIDC_OP_USER_ENDPOINT: https://drive-keycloak.127.0.0.1.nip.io/realms/drive/protocol/openid-connect/userinfo
|
|
OIDC_OP_LOGOUT_ENDPOINT: https://drive-keycloak.127.0.0.1.nip.io/realms/drive/protocol/openid-connect/logout
|
|
OIDC_RP_CLIENT_ID: drive
|
|
OIDC_RP_CLIENT_SECRET: ThisIsAnExampleKeyForDevPurposeOnly
|
|
OIDC_RP_SIGN_ALGO: RS256
|
|
OIDC_RP_SCOPES: "openid email"
|
|
OIDC_USER_FIELD_TO_SHORTNAME: "given_name"
|
|
OIDC_USER_FIELDS_TO_FULLNAME: "given_name,usual_name"
|
|
LOGIN_REDIRECT_URL: https://drive.127.0.0.1.nip.io
|
|
LOGIN_REDIRECT_URL_FAILURE: https://drive.127.0.0.1.nip.io
|
|
LOGOUT_REDIRECT_URL: https://drive.127.0.0.1.nip.io
|
|
DB_HOST: postgresql-dev-backend-postgres
|
|
DB_NAME:
|
|
secretKeyRef:
|
|
name: postgresql-dev-backend-postgres
|
|
key: database
|
|
DB_USER:
|
|
secretKeyRef:
|
|
name: postgresql-dev-backend-postgres
|
|
key: username
|
|
DB_PASSWORD:
|
|
secretKeyRef:
|
|
name: postgresql-dev-backend-postgres
|
|
key: password
|
|
DB_PORT: 5432
|
|
REDIS_URL: redis://user:pass@redis-dev-backend-redis:6379/1
|
|
DJANGO_CELERY_BROKER_URL: redis://user:pass@redis-dev-backend-redis:6379/1
|
|
AWS_S3_ENDPOINT_URL: https://drive-minio.127.0.0.1.nip.io
|
|
AWS_S3_ACCESS_KEY_ID: dinum
|
|
AWS_S3_SECRET_ACCESS_KEY: password
|
|
AWS_STORAGE_BUCKET_NAME: drive-media-storage
|
|
AWS_S3_SIGNATURE_VERSION: s3v4
|
|
STORAGES_STATICFILES_BACKEND: django.contrib.staticfiles.storage.StaticFilesStorage
|
|
MEDIA_BASE_URL: https://drive.127.0.0.1.nip.io
|
|
migrate:
|
|
command:
|
|
- "/bin/sh"
|
|
- "-c"
|
|
- |
|
|
python manage.py migrate --no-input
|
|
restartPolicy: Never
|
|
|
|
createsuperuser:
|
|
command:
|
|
- "/bin/sh"
|
|
- "-c"
|
|
- |
|
|
python manage.py createsuperuser --email admin@example.com --password admin
|
|
restartPolicy: Never
|
|
|
|
# Extra volume mounts to manage our local custom CA and avoid to set ssl_verify: false
|
|
extraVolumeMounts:
|
|
- name: certs
|
|
mountPath: /usr/local/lib/python3.12/site-packages/certifi/cacert.pem
|
|
subPath: cacert.pem
|
|
|
|
# Extra volumes to manage our local custom CA and avoid to set ssl_verify: false
|
|
extraVolumes:
|
|
- name: certs
|
|
configMap:
|
|
name: certifi
|
|
items:
|
|
- key: cacert.pem
|
|
path: cacert.pem
|
|
|
|
frontend:
|
|
replicas: 1
|
|
image:
|
|
repository: lasuite/drive-frontend
|
|
pullPolicy: Always
|
|
tag: "latest"
|
|
|
|
|
|
ingress:
|
|
enabled: true
|
|
host: drive.127.0.0.1.nip.io
|
|
annotations:
|
|
nginx.ingress.kubernetes.io/proxy-body-size: 150m
|
|
|
|
ingressAdmin:
|
|
enabled: true
|
|
host: drive.127.0.0.1.nip.io
|
|
|
|
posthog:
|
|
ingress:
|
|
enabled: false
|
|
|
|
ingressAssets:
|
|
enabled: false
|
|
|
|
ingressMedia:
|
|
enabled: true
|
|
host: drive.127.0.0.1.nip.io
|
|
|
|
annotations:
|
|
nginx.ingress.kubernetes.io/auth-url: https://drive.127.0.0.1.nip.io/api/v1.0/items/media-auth/
|
|
nginx.ingress.kubernetes.io/auth-response-headers: "Authorization, X-Amz-Date, X-Amz-Content-SHA256"
|
|
nginx.ingress.kubernetes.io/upstream-vhost: drive-minio.127.0.0.1.nip.io
|
|
nginx.ingress.kubernetes.io/rewrite-target: /drive-media-storage/$1
|
|
|
|
ingressMediaPreview:
|
|
enabled: true
|
|
host: drive.127.0.0.1.nip.io
|
|
|
|
annotations:
|
|
nginx.ingress.kubernetes.io/auth-url: https://drive.127.0.0.1.nip.io/api/v1.0/items/media-auth/
|
|
nginx.ingress.kubernetes.io/auth-response-headers: "Authorization, X-Amz-Date, X-Amz-Content-SHA256"
|
|
nginx.ingress.kubernetes.io/upstream-vhost: drive-minio.127.0.0.1.nip.io
|
|
nginx.ingress.kubernetes.io/rewrite-target: /drive-media-storage/$1
|
|
|
|
serviceMedia:
|
|
host: minio-dev-backend-minio.drive.svc.cluster.local
|
|
port: 80
|