modified: serv_nginx/docker-compose.yml

new file: serv_nginx/keycloak/.env.keycloak new file: serv_nginx/keycloak/realm-config/setup-realm.json modified: serv_nginx/nginx/nginx-ssl.conf revert to ald setting into nginx
2025-10-21 22:29:43 +05:00
parent bb284c6293
commit c04077bb8c
4 changed files with 162 additions and 45 deletions
@@ -0,0 +1,112 @@
+{
+  "id": "master",
+  "realm": "master",
+  "displayName": "Yalarba & Begushiybashkir",
+  "displayNameHtml": "<div class=\"kc-logo-text\"><span>Yalarba Auth</span></div>",
+  "enabled": true,
+  "sslRequired": "external",
+  "registrationAllowed": false,
+  "loginWithEmailAllowed": true,
+  "duplicateEmailsAllowed": false,
+  "resetPasswordAllowed": true,
+  "editUsernameAllowed": false,
+  "bruteForceProtected": true,
+  "permanentLockout": false,
+  "maxFailureWaitSeconds": 900,
+  "minimumQuickLoginWaitSeconds": 60,
+  "waitIncrementSeconds": 60,
+  "quickLoginCheckMilliSeconds": 1000,
+  "maxDeltaTimeSeconds": 43200,
+  "failureFactor": 5,
+  
+  "clients": [
+    {
+      "clientId": "yalarba-web",
+      "name": "Yalarba.ru Web Application",
+      "description": "Web application for yalarba.ru",
+      "enabled": true,
+      "protocol": "openid-connect",
+      "publicClient": true,
+      "standardFlowEnabled": true,
+      "implicitFlowEnabled": false,
+      "directAccessGrantsEnabled": false,
+      "rootUrl": "https://yalarba.ru",
+      "baseUrl": "https://yalarba.ru",
+      "redirectUris": [
+        "https://yalarba.ru/*",
+        "https://www.yalarba.ru/*"
+      ],
+      "webOrigins": [
+        "https://yalarba.ru",
+        "https://www.yalarba.ru"
+      ],
+      "attributes": {
+        "oauth2.device.authorization.grant.enabled": "false",
+        "backchannel.logout.revoke.offline_tokens": "false"
+      }
+    },
+    {
+      "clientId": "begushiybashkir-web",
+      "name": "Begushiybashkir.ru Web Application",
+      "description": "Web application for begushiybashkir.ru",
+      "enabled": true,
+      "protocol": "openid-connect",
+      "publicClient": true,
+      "standardFlowEnabled": true,
+      "implicitFlowEnabled": false,
+      "directAccessGrantsEnabled": false,
+      "rootUrl": "https://begushiybashkir.ru",
+      "baseUrl": "https://begushiybashkir.ru",
+      "redirectUris": [
+        "https://begushiybashkir.ru/*",
+        "https://www.begushiybashkir.ru/*"
+      ],
+      "webOrigins": [
+        "https://begushiybashkir.ru",
+        "https://www.begushiybashkir.ru"
+      ],
+      "attributes": {
+        "oauth2.device.authorization.grant.enabled": "false",
+        "backchannel.logout.revoke.offline_tokens": "false"
+      }
+    },
+    {
+      "clientId": "admin-cli",
+      "name": "${client_admin-cli}",
+      "enabled": true,
+      "protocol": "openid-connect",
+      "publicClient": false,
+      "standardFlowEnabled": false,
+      "implicitFlowEnabled": false,
+      "directAccessGrantsEnabled": true,
+      "serviceAccountsEnabled": true
+    }
+  ],
+  
+  "users": [
+    {
+      "username": "superadmin",
+      "email": "admin@yalarba.ru",
+      "firstName": "Super",
+      "lastName": "Admin",
+      "enabled": true,
+      "emailVerified": true,
+      "credentials": [
+        {
+          "type": "password",
+          "value": "SuperAdmin123!",
+          "temporary": false
+        }
+      ],
+      "realmRoles": [
+        "admin",
+        "default-role-master"
+      ],
+      "clientRoles": {
+        "realm-management": [
+          "realm-admin"
+        ]
+      }
+    }
+  ]
+}