my-apps/manifests/extra-resources/nextcloud/keycloak-post-install-cm.yaml

21 lines
616 B
YAML

apiVersion: v1
kind: ConfigMap
metadata:
name: nextcloud-post-install
namespace: my-apps
data:
keycloak-post-install.sh: |
#!/bin/bash
echo "🔐 Enabling sociallogin app..."
occ app:install sociallogin || true
occ app:enable sociallogin
echo "🔐 Configuring Keycloak OIDC provider..."
occ sociallogin:custom_oidc keycloak \
--client-id="nextcloud" \
--client-secret="$(cat /secrets/keycloak-client-secret)" \
--issuer-uri="https://keycloak.dvirlabs.com/realms/dvirlabs" \
--auto-provision 1 \
--hide-login-form 0 \
--scope="openid profile email"