From 1ccee14d3cfd66d8bd17270118f55662bb42d91d Mon Sep 17 00:00:00 2001 From: Franck Cuny Date: Thu, 14 Aug 2025 10:18:27 -0700 Subject: add keycloak for OAuth, runbooks, and finish forgejo setup --- docs/keycloak.org | 24 ++++++++++++++++++++++++ 1 file changed, 24 insertions(+) create mode 100644 docs/keycloak.org (limited to 'docs/keycloak.org') diff --git a/docs/keycloak.org b/docs/keycloak.org new file mode 100644 index 0000000..e29350f --- /dev/null +++ b/docs/keycloak.org @@ -0,0 +1,24 @@ +* Keycloak + +Running at id.fcuny.net + +There's an admin user in 1password. + +** Client for forgejo +- create a client with name =forgejo= +- set root URL to =https://code.fcuny.net= +- set home URL to =https://code.fcuny.net= +- set valid redirects URL to =https://code.fcuny.net*= +- set web origins to =https://code.fcuny.net= +- set admin URL to https://code.fcuny.net +- set client authentication to =on= +- keep =standard flow= checked and nothing else +*** forgejo configuration +- create a new authentication source under https://code.fcuny.net/admin/auths +- choose OAuth2 +- set the name to =id.fcuny.net= +- set OAuth2 provider to OpenID Connect +- configure the OpenID realm to =https://id.fcuny.net/realms/master/.well-known/openid-configuration= +- the client ID is =forgejo= +- the client secret is in the =credentials= tab in forgejo for the client +- select =skip local 2FA= -- cgit v1.2.3