Feat/add auth rottenspringbok

ansible/group_vars/all/websites.yml

@@ -271,3 +271,5 @@ websites:
     custom_config: true
     alternative_names: []
     state: "present"
+    authenticated: true
+    oauth2_callback_url: "/auth/callback"

ansible/group_vars/production/vars.yml

@@ -184,3 +184,12 @@ secret_harbor:
   harbor_port: 6969
   harbor_version: "v2.14.0"
   harbor_install_dir: "/var/www/harbor"
+
+secret_rottenspringbok:
+  oauth_client_id: "{{ vault_secret_rottenspringbok.oauth_client_id }}"
+  oauth_client_secret: "{{ vault_secret_rottenspringbok.oauth_client_secret }}"
+  app_secret: "{{ vault_secret_rottenspringbok.app_secret }}"
+  oauth_authorize_url: "https://koala.svsticky.nl/api/oauth/authorize"
+  oauth_token_url: "https://koala.svsticky.nl/api/oauth/token"
+  oauth_api_base_url: "https://koala.svsticky.nl"
+  host_url: "https://rottenspringbok.svsticky.nl"

ansible/group_vars/staging/vars.yml

@@ -173,3 +173,12 @@ secret_committeeclash:
   postgres_password: "{{ vault_secret_committeeclash.postgres_password }}"
   host_url: "https://committeeclash.dev.svsticky.nl"
   oauth_provider_url: "https://koala.dev.svsticky.nl"
+
+secret_rottenspringbok:
+  oauth_client_id: "{{ vault_secret_rottenspringbok.oauth_client_id }}"
+  oauth_client_secret: "{{ vault_secret_rottenspringbok.oauth_client_secret }}"
+  app_secret: "{{ vault_secret_rottenspringbok.app_secret }}"
+  oauth_authorize_url: "https://koala.dev.svsticky.nl/api/oauth/authorize"
+  oauth_token_url: "https://koala.dev.svsticky.nl/api/oauth/token"
+  oauth_api_base_url: "https://koala.dev.svsticky.nl"
+  host_url: "https://rottenspringbok.dev.svsticky.nl"

ansible/roles/rottenspringbok/templates/.env.j2

@@ -1 +1,8 @@
-HOST_PORT={{ rottenspringbok_port }}
+HOST_PORT={{ rottenspringbok_port }}
+OAUTH_CLIENT_ID={{ secret_rottenspringbok.oauth_client_id }}
+OAUTH_CLIENT_SECRET={{ secret_rottenspringbok.oauth_client_secret }}
+SECRET_KEY={{ secret_rottenspringbok.app_secret }}
+OAUTH_AUTHORIZE_URL={{ secret_rottenspringbok.oauth_authorize_url }}
+OAUTH_TOKEN_URL={{ secret_rottenspringbok.oauth_token_url }}
+OAUTH_API_BASE_URL={{ secret_rottenspringbok.oauth_api_base_url }}
+OAUTH_REDIRECT_URL={{ secret_rottenspringbok.host_url }}/auth/callback

ansible/roles/rottenspringbok/vars/main.yml

@@ -1,3 +1,3 @@
 ---
 rottenspringbok_port: 4572
-rottenspringbok_project_source: /home/rotten_springbok
+rottenspringbok_project_source: /var/www/rotten_springbok