48 lines
1.2 KiB
Django/Jinja
48 lines
1.2 KiB
Django/Jinja
{
|
|
"realm": "{{ item.name }}",
|
|
"displayName": "{{ item.display_name }}",
|
|
"enabled": {{ item.enabled | lower }},
|
|
"sslRequired": "external",
|
|
"registrationAllowed": false,
|
|
"loginWithEmailAllowed": true,
|
|
"duplicateEmailsAllowed": false,
|
|
"resetPasswordAllowed": true,
|
|
"editUsernameAllowed": false,
|
|
"bruteForceProtected": true,
|
|
"clients": [
|
|
{% for client in item.clients %}
|
|
{
|
|
"clientId": "{{ client.client_id }}",
|
|
"name": "{{ client.name }}",
|
|
"enabled": {{ client.enabled | lower }},
|
|
"protocol": "{{ client.protocol }}",
|
|
"publicClient": false,
|
|
"redirectUris": {{ client.redirect_uris | to_json }},
|
|
"webOrigins": {{ client.web_origins | to_json }},
|
|
"standardFlowEnabled": true,
|
|
"directAccessGrantsEnabled": false
|
|
}{{ "," if not loop.last else "" }}
|
|
{% endfor %}
|
|
]
|
|
}
|
|
|
|
---SEPARATOR---
|
|
|
|
# Alliance Boréale - Keycloak Handlers
|
|
# Date: 2025-10-31
|
|
|
|
---
|
|
- name: restart keycloak
|
|
ansible.builtin.systemd:
|
|
name: keycloak
|
|
state: restarted
|
|
|
|
- name: reload nginx
|
|
ansible.builtin.systemd:
|
|
name: nginx
|
|
state: reloaded
|
|
|
|
- name: reload nftables
|
|
ansible.builtin.systemd:
|
|
name: nftables
|
|
state: reloaded
|