mirror of
https://github.com/siderolabs/omni.git
synced 2026-01-21 10:51:14 +01:00
9e033d7c10
Uses shell veriables so the template can be fed through envsubst to help people get started faster. Signed-off-by: Justin Garrison <justin.garrison@siderolabs.com>
37 lines
1.1 KiB
Plaintext
37 lines
1.1 KiB
Plaintext
# Omni
|
|
OMNI_IMG_TAG=${OMNI_VERSION}
|
|
OMNI_ACCOUNT_UUID=${OMNI_ACCOUNT_UUID}
|
|
NAME=omni
|
|
EVENT_SINK_PORT=8091
|
|
|
|
## Keys and Certs
|
|
TLS_CERT=/etc/letsencrypt/live/${OMNI_DOMAIN_NAME}/fullchain.pem
|
|
TLS_KEY=/etc/letsencrypt/live/${OMNI_DOMAIN_NAME}/privkey.pem
|
|
ETCD_VOLUME_PATH=/etc/etcd/
|
|
ETCD_ENCRYPTION_KEY=${PWD}/omni.asc
|
|
|
|
## Binding
|
|
BIND_ADDR=0.0.0.0:443
|
|
MACHINE_API_BIND_ADDR=0.0.0.0:8090
|
|
K8S_PROXY_BIND_ADDR=0.0.0.0:8100
|
|
|
|
## Domains and Advertisements
|
|
OMNI_DOMAIN_NAME="${OMNI_DOMAIN_NAME}"
|
|
ADVERTISED_API_URL="https://${OMNI_DOMAIN_NAME}"
|
|
SIDEROLINK_ADVERTISED_API_URL="https://${OMNI_DOMAIN_NAME}:8090/"
|
|
ADVERTISED_K8S_PROXY_URL="https://${OMNI_DOMAIN_NAME}:8100/"
|
|
SIDEROLINK_WIREGUARD_ADVERTISED_ADDR="${OMNI_WG_IP}:50180"
|
|
|
|
## Users
|
|
INITIAL_USER_EMAILS="${OMNI_ADMIN_EMAIL}"
|
|
|
|
## Authentication
|
|
#Auth0
|
|
AUTH='--auth-auth0-enabled=true \
|
|
--auth-auth0-domain=${AUTH0_DOMAIN} \
|
|
--auth-auth0-client-id=${AUTH0_CLIENT_ID}
|
|
# Or, when using SAML:
|
|
# AUTH='--auth-saml-enabled=true \
|
|
# --auth-saml-url=<saml-url>'
|
|
#Only one AUTH version can be used at a time, so ensure to remove the one you don't use.
|