mirror of
https://github.com/suitenumerique/drive.git
synced 2026-05-05 06:32:36 +02:00
a78b017f06
The OIDC_REDIRECT_ALLOWED_HOSTS setting expects host:port values without the http:// scheme prefix. Including the scheme caused redirect validation to fail silently.
96 lines
3.6 KiB
Plaintext
96 lines
3.6 KiB
Plaintext
# Django
|
|
DJANGO_ALLOWED_HOSTS=*
|
|
DJANGO_SECRET_KEY=ThisIsAnExampleKeyForDevPurposeOnly
|
|
DJANGO_SETTINGS_MODULE=drive.settings
|
|
DJANGO_SUPERUSER_PASSWORD=admin
|
|
|
|
# Logging
|
|
# Set to DEBUG level for dev only
|
|
LOGGING_LEVEL_HANDLERS_CONSOLE=INFO
|
|
LOGGING_LEVEL_LOGGERS_ROOT=INFO
|
|
LOGGING_LEVEL_LOGGERS_APP=INFO
|
|
|
|
# Python
|
|
PYTHONPATH=/app
|
|
|
|
# Drive settings
|
|
|
|
# Mail
|
|
DJANGO_EMAIL_BRAND_NAME="La Suite Numérique"
|
|
DJANGO_EMAIL_HOST="mailcatcher"
|
|
DJANGO_EMAIL_LOGO_IMG="http://localhost:3000/assets/logo-suite-numerique.png"
|
|
DJANGO_EMAIL_PORT=1025
|
|
|
|
# Media
|
|
STORAGES_STATICFILES_BACKEND=django.contrib.staticfiles.storage.StaticFilesStorage
|
|
AWS_S3_ACCESS_KEY_ID=drive
|
|
AWS_S3_SECRET_ACCESS_KEY=password
|
|
AWS_S3_REGION_NAME=eu-east-1
|
|
AWS_S3_SIGNATURE_VERSION=s3v4
|
|
AWS_S3_DOMAIN_REPLACE=http://localhost:9000
|
|
AWS_S3_ENDPOINT_URL=http://minio:9000
|
|
# To use with ds-proxy
|
|
# AWS_S3_DOMAIN_REPLACE=http://localhost:4444/upstream
|
|
# AWS_S3_ENDPOINT_URL=http://ds-proxy:4444/upstream
|
|
MEDIA_BASE_URL=http://localhost:8083
|
|
|
|
# OIDC
|
|
OIDC_OP_JWKS_ENDPOINT=http://nginx:8083/realms/drive/protocol/openid-connect/certs
|
|
OIDC_OP_AUTHORIZATION_ENDPOINT=http://localhost:8083/realms/drive/protocol/openid-connect/auth
|
|
OIDC_OP_TOKEN_ENDPOINT=http://nginx:8083/realms/drive/protocol/openid-connect/token
|
|
OIDC_OP_USER_ENDPOINT=http://nginx:8083/realms/drive/protocol/openid-connect/userinfo
|
|
|
|
OIDC_RP_CLIENT_ID=drive
|
|
OIDC_RP_CLIENT_SECRET=ThisIsAnExampleKeyForDevPurposeOnly
|
|
OIDC_RP_SIGN_ALGO=RS256
|
|
OIDC_RP_SCOPES="openid email"
|
|
|
|
LOGIN_REDIRECT_URL=http://localhost:3000
|
|
LOGIN_REDIRECT_URL_FAILURE=http://localhost:3000
|
|
LOGOUT_REDIRECT_URL=http://localhost:3000
|
|
|
|
OIDC_REDIRECT_ALLOWED_HOSTS="localhost:8083,localhost:3000"
|
|
OIDC_AUTH_REQUEST_EXTRA_PARAMS={"acr_values": "eidas1"}
|
|
|
|
# Resource Server Backend
|
|
OIDC_OP_URL=http://localhost:8083/realms/drive
|
|
OIDC_OP_INTROSPECTION_ENDPOINT = http://nginx:8083/realms/drive/protocol/openid-connect/token/introspect
|
|
OIDC_RESOURCE_SERVER_ENABLED=False
|
|
OIDC_RS_CLIENT_ID=drive
|
|
OIDC_RS_CLIENT_SECRET=ThisIsAnExampleKeyForDevPurposeOnly
|
|
OIDC_RS_AUDIENCE_CLAIM="client_id" # The claim used to identify the audience
|
|
OIDC_RS_ALLOWED_AUDIENCES=""
|
|
|
|
# Frontend
|
|
FRONTEND_THEME=default
|
|
FRONTEND_MORE_LINK=https://docs.numerique.gouv.fr/docs/fa0aba15-e119-4185-b466-a4b37ad95950/
|
|
FRONTEND_FEEDBACK_BUTTON_SHOW=True
|
|
FRONTEND_FEEDBACK_BUTTON_IDLE=False
|
|
FRONTEND_FEEDBACK_ITEMS={"form":{"url": "https://tally.so/r/w2YaWL"}, "tchap":{"url": "https://tchap.gouv.fr/#/room/#fichiers:agent.dinum.tchap.gouv.fr"}, "visio":{"url": "https://cal.com/robin-lecomte-eyul9w/fichiers"}}
|
|
FRONTEND_FEEDBACK_MESSAGES_WIDGET_ENABLED=False
|
|
FRONTEND_FEEDBACK_MESSAGES_WIDGET_API_URL=
|
|
FRONTEND_FEEDBACK_MESSAGES_WIDGET_CHANNEL=
|
|
FRONTEND_FEEDBACK_MESSAGES_WIDGET_PATH=
|
|
|
|
# WOPI
|
|
WOPI_CLIENTS="collabora,onlyoffice"
|
|
WOPI_COLLABORA_DISCOVERY_URL="http://collabora:9980/hosting/discovery"
|
|
WOPI_ONLYOFFICE_DISCOVERY_URL=http://onlyoffice/hosting/discovery
|
|
WOPI_SRC_BASE_URL=http://app-dev:8000
|
|
|
|
# Indexer
|
|
# SEARCH_INDEXER_CLASS="core.services.search_indexers.SearchIndexer"
|
|
SEARCH_INDEXER_SECRET=find-api-key-for-driv-with-exactly-50-chars-length # Key generated by create_demo in Find app.
|
|
SEARCH_INDEXER_URL="http://find:8000/api/v1.0/documents/index/"
|
|
SEARCH_INDEXER_QUERY_URL="http://find:8000/api/v1.0/documents/search/"
|
|
|
|
# Enables the search of indexed files through the API
|
|
FEATURES_INDEXED_SEARCH=True
|
|
|
|
# Store OIDC tokens in the session
|
|
# OIDC_STORE_ACCESS_TOKEN = True
|
|
# OIDC_STORE_REFRESH_TOKEN = True # Store the encrypted refresh token in the session.
|
|
# Must be a valid Fernet key (32 url-safe base64-encoded bytes)
|
|
# To create one, use the bin/fernetkey command.
|
|
# OIDC_STORE_REFRESH_TOKEN_KEY="your-32-byte-encryption-key=="
|