Skip to content

Commit

Permalink
update idp
Browse files Browse the repository at this point in the history
  • Loading branch information
@Thiritin
Thiritin committed Dec 22, 2023
1 parent 949f952 commit 27e08c0
Show file tree
Hide file tree
Showing 22 changed files with 836 additions and 0 deletions.
61 changes: 61 additions & 0 deletions app/Providers/Filament/AdminPanelProvider.php
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,61 @@
<?php

namespace App\Providers\Filament;

use App\Http\Middleware\AccessTokenValidationMiddleware;
use Filament\Http\Middleware\Authenticate;
use Filament\Http\Middleware\DisableBladeIconComponents;
use Filament\Http\Middleware\DispatchServingFilamentEvent;
use Filament\Pages;
use Filament\Panel;
use Filament\PanelProvider;
use Filament\Support\Colors\Color;
use Filament\Widgets;
use Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse;
use Illuminate\Cookie\Middleware\EncryptCookies;
use Illuminate\Foundation\Http\Middleware\VerifyCsrfToken;
use Illuminate\Routing\Middleware\SubstituteBindings;
use Illuminate\Session\Middleware\AuthenticateSession;
use Illuminate\Session\Middleware\StartSession;
use Illuminate\View\Middleware\ShareErrorsFromSession;

class AdminPanelProvider extends PanelProvider
{
public function panel(Panel $panel): Panel
{
return $panel
->default()
->id('admin')
->path('admin')
->login()
->authGuard('admin')
->colors([
'primary' => Color::hex('#00504b'),
])
->discoverResources(in: app_path('Filament/Resources'), for: 'App\\Filament\\Resources')
->discoverPages(in: app_path('Filament/Pages'), for: 'App\\Filament\\Pages')
->pages([
Pages\Dashboard::class,
])
->discoverWidgets(in: app_path('Filament/Widgets'), for: 'App\\Filament\\Widgets')
->widgets([
Widgets\AccountWidget::class,
Widgets\FilamentInfoWidget::class,
])
->middleware([
EncryptCookies::class,
AddQueuedCookiesToResponse::class,
StartSession::class,
AuthenticateSession::class,
ShareErrorsFromSession::class,
VerifyCsrfToken::class,
SubstituteBindings::class,
DisableBladeIconComponents::class,
DispatchServingFilamentEvent::class,
])
->authMiddleware([
Authenticate::class,
AccessTokenValidationMiddleware::class,
]);
}
}
278 changes: 278 additions & 0 deletions docker-compose-old.yml
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,278 @@
version: '3.7'
########################################################################################################################
# Variables
########################################################################################################################
x-variables:
database:
USER: &idp-db-username "idp"
PASSWORD: &idp-db-password "idp"
DATABASE: &idp-db-database "idp"
laravel-general:
&laravel-general
APP_KEY: base64:8EuWVWRVLiQcKZV7RIKhnqvBg1QUts1yg8VN6jeCQbI=
APP_ENV: "local"
APP_DEBUG: "true"
DB_CONNECTION: mysql
DB_HOST: database
DB_DATABASE: *idp-db-database
DB_USERNAME: *idp-db-username
DB_PASSWORD: *idp-db-password
DB_PORT: 3306
BROADCAST_DRIVER: log
REDIS_HOST: redis
CACHE_DRIVER: redis
QUEUE_CONNECTION: redis
SESSION_DRIVER: redis
SESSION_LIFETIME: 43200
OIDC_ADMIN_CLIENT_ID: 05e92e80-24be-4f4f-a081-0af3d572ea50
OIDC_ADMIN_SECRET: IyXHaTqIskSbPMSw_AXxhdQ_8S
OIDC_MAIN_CLIENT_ID: 05e92e80-24be-4f4f-a081-0af3d572ea50
OIDC_MAIN_SECRET: BYOrcv1H3vhfMV_w.EOz3Dbs6V
GROUP_STAFF_ID: "1"
GROUP_DIRECTORS_ID: "1"
# Mail
MAIL_MAILER: smtp
MAIL_HOST: sandbox.smtp.mailtrap.io
MAIL_PORT: 2525
MAIL_USERNAME: e089aaf397ea5d
MAIL_PASSWORD: cf62acb3b401bb
MAIL_ENCRYPTION: tls
MAIL_FROM_ADDRESS: noreply-identity@eurofurence.org
MAIL_FROM_NAME: "Eurofurence Identity"
MAIL_REPLY_TO_ADDRESS: identity@eurofurence.org
MAIL_REPLY_TO_NAME: "Eurofurence Identity"
# IMAP
IMAP_HOST: mail.tigress.com
IMAP_PORT: 993
IMAP_ENCRYPTION: ssl
IMAP_USERNAME: noreply-identity
IMAP_PASSWORD: vaar4Looc2Lia4N
SENTRY_ENVIRONMENT: local
SENTRY_LARAVEL_DSN: ""
SENTRY_TRACES_SAMPLE_RATE: 1
HASHIDS_SALT: "ZXv0i@anR#YPKTx@Ly&BK@mhDhT"
HASHIDS_USER_SALT: "Fc79Rhek*9%UH0N^IOLwXag8#x4"
HASHIDS_GROUP_SALT: "u3g91H^ldXsJQ2WdAtt7XV8w27d"
CLOCKWORK_DATABASE_COLLECT_MODELS_RETRIEVED: "true"
CLOCKWORK_DATABASE_DETECT_DUPLICATE_QUERIES: "true"
laravel-urls:
&laravel-urls
HYDRA_PUBLIC_URL: "http://hydra:4444"
HYDRA_ADMIN_URL: "http://hydra:4445"
HYDRA_LOCAL_PUBLIC: "http://identity.eurofurence.localhost"
APP_URL: "http://identity.eurofurence.localhost"
ASSET_URL: "http://identity.eurofurence.localhost"
ROUTER_API_DOMAIN: identity.eurofurence.localhost
hydra:
&hydra
DEV: "true"
DSN: &hydra-dsn "mysql://hydra:hydra@tcp(hydra-database:3306)/hydra?parseTime=true&tls=skip-verify&max_conns=20&max_idle_conns=4"
SECRETS_SYSTEM: 3zmBik#H7g9LKT?Fb9FnbGxytAc49yn9@sKiYhY8
URLS_SELF_ISSUER: http://identity.eurofurence.localhost/
URLS_CONSENT: http://identity.eurofurence.localhost/auth/consent
URLS_LOGIN: http://identity.eurofurence.localhost/auth/login
URLS_LOGOUT: http://identity.eurofurence.localhost/auth/logout
URLS_ERROR: http://identity.eurofurence.localhost/auth/error
URLS_POST_LOGOUT_REDIRECT: http://identity.eurofurence.localhost/auth/logout
SERVE_COOKIES_SAME_SITE_MODE: Lax
HYDRA_ADMIN_URL: http://127.0.0.1:4445
#OIDC_SUBJECT_IDENTIFIERS_SUPPORTED_TYPES: pairwise
WEBFINGER_OIDC_DISCOVERY_SUPPORTED_CLAIMS_0: email
WEBFINGER_OIDC_DISCOVERY_SUPPORTED_CLAIMS_1: name
WEBFINGER_OIDC_DISCOVERY_SUPPORTED_CLAIMS_2: email
WEBFINGER_OIDC_DISCOVERY_SUPPORTED_CLAIMS_3: email_verified
WEBFINGER_OIDC_DISCOVERY_SUPPORTED_CLAIMS_4: avatar
WEBFINGER_OIDC_DISCOVERY_SUPPORTED_CLAIMS_5: groups
WEBFINGER_OIDC_DISCOVERY_SUPPORTED_SCOPE_0: profile
WEBFINGER_OIDC_DISCOVERY_SUPPORTED_SCOPE_1: email
WEBFINGER_OIDC_DISCOVERY_SUPPORTED_SCOPE_2: groups
WEBFINGER_OIDC_DISCOVERY_SUPPORTED_SCOPE_3: groups.read
WEBFINGER_OIDC_DISCOVERY_SUPPORTED_SCOPE_4: groups.write
WEBFINGER_OIDC_DISCOVERY_SUPPORTED_SCOPE_5: groups.delete
WEBFINGER_OIDC_DISCOVERY_SUPPORTED_SCOPE_6: registration.reg.test
WEBFINGER_OIDC_DISCOVERY_SUPPORTED_SCOPE_7: registration.reg.live
WEBFINGER_OIDC_DISCOVERY_SUPPORTED_SCOPE_8: registration.room.test
WEBFINGER_OIDC_DISCOVERY_SUPPORTED_SCOPE_9: registration.room.live
LOG_LEAK_SENSITIVE_VALUES: "true"
OAUTH2_EXPOSE_INTERNAL_ERRORS: "true"
# TRACING_PROVIDER: zipkin
# TRACING_PROVIDERS_ZIPKIN_SERVER_URL: http://zipkin:9411/api/v2/spans
hydra-database:
USER: &hydra-db-user "hydra"
PASSWORD: &hydra-db-password "hydra"
DATABASE: &hydra-db-database "hydra"
########################################################################################################################
# Services
########################################################################################################################
services:
######################################################################################################################
# Identity Main | Laravel
######################################################################################################################
api:
image: eurofurence/identity:local
restart: on-failure
environment:
<<: [ *laravel-general, *laravel-urls ]
volumes:
- './:/app/'
labels:
- traefik.enable=true
- traefik.http.routers.app.rule=Host(`identity.eurofurence.localhost`)
- traefik.http.services.app.loadbalancer.server.port=80
- traefik.http.routers.app.entrypoints=web
command:
- php
- artisan
- serve
- --port=80
- --host=0.0.0.0
worker:
image: eurofurence/identity:local
restart: on-failure
environment:
<<: [ *laravel-general, *laravel-urls ]
volumes:
- './:/app/'
command:
- php
- artisan
- horizon
vite:
image: eurofurence/identity:local
restart: on-failure
environment:
<<: [ *laravel-general, *laravel-urls ]
ports:
- 5173:5173
command:
- bash
- -c
- "npm run dev --host"
volumes:
- './:/app/'
storage:
image: caddy:latest
restart: on-failure
command:
- caddy
- file-server
- --root
- /usr/srv/content
volumes:
- './storage/app/public:/usr/srv/content/storage'
labels:
- traefik.enable=true
- traefik.http.routers.storage.rule=Host(`identity.eurofurence.localhost`) && PathPrefix(`/storage`)
- traefik.http.services.storage.loadbalancer.server.port=80
- traefik.http.routers.storage.entrypoints=web
######################################################################################################################
# Other
######################################################################################################################
redis:
image: redis
ports:
- '6379:6379'
database:
image: 'mysql:8.0'
ports:
- '3306:3306'
environment:
MYSQL_USER: *idp-db-username
MYSQL_ROOT_PASSWORD: *idp-db-password
MYSQL_PASSWORD: *idp-db-password
MYSQL_DATABASE: *idp-db-database
volumes:
- 'database:/var/lib/mysql'
######################################################################################################################
# Hydra
######################################################################################################################
hydra:
image: 'oryd/hydra:v2.0.1'
environment:
<<: *hydra
ports:
- '4444:4444'
- '4445:4445' # NEVER EXPOSE PUBLICLY ON PROD, ADMIN ENDPONT!!!
- '5555:5555'
command: serve all
labels:
- traefik.enable=true
- traefik.http.routers.hydra.rule=Host(`identity.eurofurence.localhost`) && PathPrefix(`/.well-known`,`/oauth2`,`/health`,`/userinfo`)
- traefik.http.services.hydra.loadbalancer.server.port=4444
- traefik.http.routers.hydra.entrypoints=web
hydra-migrate:
image: 'oryd/hydra:v2.0.1'
environment:
DSN: *hydra-dsn
command: migrate sql -e --yes
restart: on-failure
hydra-database:
image: 'mysql:8'
ports:
- '3307:3306'
environment:
MYSQL_USER: *hydra-db-user
MYSQL_PASSWORD: *hydra-db-password
MYSQL_ROOT_PASSWORD: *hydra-db-password
MYSQL_DATABASE: *hydra-db-database
volumes:
- 'hydra-database:/var/lib/mysql'
######################################################################################################################
# Reverse Proxy | Traefik
######################################################################################################################
traefik:
image: 'traefik:v2.3'
command:
- '--api=true'
- '--api.insecure=true'
- '--providers.docker=true'
- '--providers.docker.exposedbydefault=false'
- '--entrypoints.web.address=:80'
ports:
- '80:80'
- '443:443'
- '8080:8080'
volumes:
- '/var/run/docker.sock:/var/run/docker.sock:ro'
######################################################################################################################
# Logging/Tracing | Prometheus & Zipkin
######################################################################################################################
#prometheus-main:
# image: prom/prometheus:v2.12.0
# ports:
# - "9090:9090"
# depends_on:
# - hydra
# command:
# --config.file=/etc/prometheus/prometheus.yml
# volumes:
# - ./prometheus/config.yml:/etc/prometheus/prometheus.yml
#zipkin:
# image: openzipkin/zipkin:2
# environment:
# - STORAGE_TYPE=mem
# ports:
# - "9411:9411" # The UI/API port
######################################################################################################################
# Documentation
######################################################################################################################
redoc:
image: 'redocly/redoc:latest'
environment:
SPEC_URL: 'openapi.yml'
PAGE_TITLE: API Docs - Identity
REDOC_OPTIONS: >-
hide-download-button=true
disable-search=true
theme='{\"logo\": {\"maxWidth\": \"100px\"}}'
expandResponses=200
labels:
- traefik.enable=true
- traefik.http.routers.redoc.rule=Host(`docs.identity.eurofurence.localhost`)
- traefik.http.services.redoc.loadbalancer.server.port=80
- traefik.http.routers.redoc.entrypoints=web
volumes:
- ./openapi.yml:/usr/share/nginx/html/openapi.yml
volumes:
hydra-database:
database:
1 change: 1 addition & 0 deletions public/css/filament/filament/app.css
View file

Large diffs are not rendered by default.

49 changes: 49 additions & 0 deletions public/css/filament/forms/forms.css
View file

Large diffs are not rendered by default.

1 change: 1 addition & 0 deletions public/css/filament/support/support.css
View file

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Loading

0 comments on commit 27e08c0

Please sign in to comment.