99 lines
3.3 KiB
Markdown
99 lines
3.3 KiB
Markdown
# `sso.base23.de` - Base23 SSO for all services
|
|
|
|
[Authentik](https://goauthentik.io/) based SSO for our sevices.
|
|
|
|
## Table of Contents
|
|
|
|
- [`sso.base23.de` - Base23 SSO for all services](#ssobase23de---base23-sso-for-all-services)
|
|
- [Table of Contents](#table-of-contents)
|
|
- [Prerequisites](#prerequisites)
|
|
- [Server Setup](#server-setup)
|
|
- [Base23 Docker registry login](#base23-docker-registry-login)
|
|
- [Installation](#installation)
|
|
- [Clone \& configure initially](#clone--configure-initially)
|
|
- [Fist run](#fist-run)
|
|
- [Upgrade](#upgrade)
|
|
- [Rebuild containers locally](#rebuild-containers-locally)
|
|
|
|
## Prerequisites
|
|
|
|
### Server Setup
|
|
|
|
```shell
|
|
apt update \
|
|
&& apt upgrade -y \
|
|
&& for pkg in docker.io docker-doc docker-compose podman-docker containerd runc; do sudo apt remove $pkg; done \
|
|
&& apt install ca-certificates curl \
|
|
&& install -m 0755 -d /etc/apt/keyrings \
|
|
&& curl -fsSL https://download.docker.com/linux/debian/gpg -o /etc/apt/keyrings/docker.asc \
|
|
&& chmod a+r /etc/apt/keyrings/docker.asc \
|
|
&& echo \
|
|
"deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.asc] https://download.docker.com/linux/debian \
|
|
$(. /etc/os-release && echo "$VERSION_CODENAME") stable" | \
|
|
tee /etc/apt/sources.list.d/docker.list > /dev/null \
|
|
&& apt update \
|
|
&& apt install -y docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin \
|
|
&& mkdir -p /var/lib/apps \
|
|
&& ln -s /var/lib/apps \
|
|
&& apt install -y git vim \
|
|
&& TEMP_DIR=$(mktemp -d) \
|
|
&& curl -fsSL https://github.com/go-acme/lego/releases/download/v4.20.2/lego_v4.20.2_linux_amd64.tar.gz -o ${TEMP_DIR}/lego_v4.20.2_linux_amd64.tar.gz \
|
|
&& tar xzvf ${TEMP_DIR}/lego_v4.20.2_linux_amd64.tar.gz --directory=${TEMP_DIR} \
|
|
&& install -m 755 -o root -g root "${TEMP_DIR}/lego" "/usr/local/bin" \
|
|
&& rm -rf ${TEMP_DIR} \
|
|
&& unset TEMP_DIR
|
|
```
|
|
|
|
### Base23 Docker registry login
|
|
|
|
```shell
|
|
docker login -u gitlab+deploy-token-5 registry.git.base23.de
|
|
```
|
|
|
|
## Installation
|
|
|
|
### Clone & configure initially
|
|
|
|
1. [Create a Storage Box sub account](https://confluence.base23.de/pages/viewpage.action?pageId=27820074).
|
|
2. Enter the username to `env.template`.
|
|
3. Run the initial configuration script:
|
|
|
|
```shell
|
|
cd /root/apps \
|
|
&& git clone ssh://git@git.base23.de:222/base23/sso.base23.de.git \
|
|
&& cd sso.base23.de \
|
|
&& ./scripts/init.sh
|
|
```
|
|
|
|
4. Use the generated SSH key and copy it to the Hetzner Storage box for backups:
|
|
|
|
```shell
|
|
ssh-copy-id -i ./data/restic/ssh/id_ed25519 -p 23 -s u291924-sub4@u291924.your-storagebox.de
|
|
```
|
|
|
|
### Fist run
|
|
|
|
```shell
|
|
docker compose build --no-cache \
|
|
--build-arg BUILD_DATE=$(date -u +'%Y-%m-%dT%H:%M:%SZ') \
|
|
--build-arg SRC_REV=$(git rev-parse --short HEAD) \
|
|
&& docker compose up -d; docker compose logs -f
|
|
```
|
|
|
|
## Upgrade
|
|
|
|
1. Update `AUTHENTIK_TAG` to the desired tag in `env.template`.
|
|
2. Commit & push changes to the Repo.
|
|
3. Run `diff --color='auto' env.template .env` to display the diff between
|
|
`env.template` and `.env`.
|
|
4. Port the made changes to `.env`.
|
|
5. `docker compose down`
|
|
6. `docker compose up -d; docker compose logs -f`
|
|
|
|
## Rebuild containers locally
|
|
|
|
```shell
|
|
docker compose build --no-cache \
|
|
--build-arg BUILD_DATE=$(date -u +'%Y-%m-%dT%H:%M:%SZ') \
|
|
--build-arg SRC_REV=$(git rev-parse --short HEAD)
|
|
```
|