make website for gravitee and immich#

This commit is contained in:
ZuluWhiskey 2023-12-19 11:37:25 +00:00
parent 4b32c43613
commit 5a3d368a4d
2 changed files with 17 additions and 37 deletions

View file

@ -22,35 +22,27 @@ The following placeholders will be used:
## authentik configuration ## authentik configuration
1. Create an **OAuth2/OpenID Provider** under **Applications** > **Providers** using the following settings: 1. Create an **OAuth2/OpenID Provider** under **Applications** > **Providers** using the following settings:
:::note :::note
Only settings that have been modified from default have been listed. Only settings that have been modified from default have been listed.
::: ::: - **Name**: Gravitee - **Protocol Settings**: - **Client ID**: Either create your own Client ID or use the auto-populated ID - **Client Secret**: Either create your own Client Secret or use the auto-populated secret
- **Name**: Gravitee :::note
- **Protocol Settings**: Take note of the `Client ID` and `Client Secret` as they are required when configuring Gravitee
- **Client ID**: Either create your own Client ID or use the auto-populated ID ::: - **Redirect URIs/Origins**: - https://gravitee.company/user/login - https://gravitee.company/console/ # Make sure to add the trailing / at the end, at the time of writing it does not work without it
- **Client Secret**: Either create your own Client Secret or use the auto-populated secret :::note
:::note Be sure to add the trailing `/` at the end of the `https://gravitee.company/console/` URI, at the time of writing Gravitee does not work without this.
Take note of the `Client ID` and `Client Secret` as they are required when configuring Gravitee :::
:::
- **Redirect URIs/Origins**:
- https://gravitee.company/user/login
- https://gravitee.company/console/ # Make sure to add the trailing / at the end, at the time of writing it does not work without it
:::note
Be sure to add the trailing `/` at the end of the `https://gravitee.company/console/` URI, at the time of writing Gravitee does not work without this.
:::
2. Create an **Application** under **Applications** > **Applications** using the following settings: 2. Create an **Application** under **Applications** > **Applications** using the following settings:
- **Name**: Gravitee - **Name**: Gravitee
- **Slug**: gravitee - **Slug**: gravitee
- **Provider**: Gravitee (the provider you created in step 1) - **Provider**: Gravitee (the provider you created in step 1)
3. Open the new provider you've just created. 3. Open the new provider you've just created.
4. Make a note of the following URLs: 4. Make a note of the following URLs:
- **Authorize URL** - **Authorize URL**
- **Token URL** - **Token URL**
- **Userinfo URL** - **Userinfo URL**
- **Logout URL** - **Logout URL**
## Gravitee configuration ## Gravitee configuration
In the Gravitee Management Console, navigate to _Organizations_ (gravitee.company/console/#!/organization/settings/identities) , under **Console** > **Authentication**. Click _Add an identity provider_, select _OpenID Connect_, and fill in the following: In the Gravitee Management Console, navigate to _Organizations_ (gravitee.company/console/#!/organization/settings/identities) , under **Console** > **Authentication**. Click _Add an identity provider_, select _OpenID Connect_, and fill in the following:

View file

@ -19,25 +19,13 @@ The following placeholders will be used:
## authentik configuration ## authentik configuration
1. Create a new OAuth2/OpenID Provider under **Applications** > **Providers** using the following settings: 1. Create a new OAuth2/OpenID Provider under **Applications** > **Providers** using the following settings: - **Name**: Immich - **Authentication flow**: default-authentication-flow - **Authorization flow**: default-provider-authorization-explicit-consent - **Client type**: Confidential - **Client ID**: Either create your own Client ID or use the auto-populated ID - **Client Secret**: Either create your own Client Secret or use the auto-populated secret
- **Name**: Immich :::note
- **Authentication flow**: default-authentication-flow Take note of the `Client ID` and `Client Secret` as they are required when configuring Immich.
- **Authorization flow**: default-provider-authorization-explicit-consent ::: - **Redirect URIs/Origins (RegEx)**:
- **Client type**: Confidential :::note
- **Client ID**: Either create your own Client ID or use the auto-populated ID Please note that the following URIs are just examples. Be sure to include all of the domains / URLs that you will use to access Immich.
- **Client Secret**: Either create your own Client Secret or use the auto-populated secret ::: - app.immich:/ - https://immich.company/auth/login - https://immich.company/user-settings - **Signing Key**: authentik Self-signed Certificate - Leave everything else as default
:::note
Take note of the `Client ID` and `Client Secret` as they are required when configuring Immich.
:::
- **Redirect URIs/Origins (RegEx)**:
:::note
Please note that the following URIs are just examples. Be sure to include all of the domains / URLs that you will use to access Immich.
:::
- app.immich:/
- https://immich.company/auth/login
- https://immich.company/user-settings
- **Signing Key**: authentik Self-signed Certificate
- Leave everything else as default
2. Open the new provider you've just created. 2. Open the new provider you've just created.
3. Make a note of the **OpenID Configuration Issuer**. 3. Make a note of the **OpenID Configuration Issuer**.