Files
templates/blueprints/outline/template.toml
Rohit Mulani 4deab71ad5 fix: use HTTPS for Outline OIDC URLs (#940)
* fix: use HTTPS for Outline OIDC URLs

* Add root-healthy Dex proxy for Outline

---------

Co-authored-by: Rohit Mulani <289630555+rohitmulani63-ops@users.noreply.github.com>
2026-07-07 17:36:13 -06:00

88 lines
1.7 KiB
TOML

[variables]
main_domain = "${domain}"
dex_domain = "dex-${domain}"
secret_key = "${hash:64}"
utils_secret = "${base64:32}"
client_secret = "${base64:32}"
postgres_password = "${password}"
[[config.domains]]
serviceName = "outline"
port = 3_000
host = "${main_domain}"
[[config.domains]]
serviceName = "dex"
port = 5_556
host = "${dex_domain}"
[config.env]
URL = "https://${main_domain}"
DEX_URL = "https://${dex_domain}"
DOMAIN_NAME = "${main_domain}"
POSTGRES_PASSWORD = "${postgres_password}"
SECRET_KEY = "${secret_key}"
UTILS_SECRET = "${utils_secret}"
CLIENT_SECRET = "${client_secret}"
[[config.mounts]]
filePath = "/etc/dex/config.yaml"
content = """
issuer: https://${dex_domain}
web:
http: 0.0.0.0:5556
storage:
type: memory
enablePasswordDB: true
frontend:
issuer: Outline
logger:
level: debug
staticPasswords:
- email: "admin@example.com"
# bcrypt hash of the string "password": $(echo password | htpasswd -BinC 10 admin | cut -d: -f2)
hash: "$2y$10$jsRWHw54uxTUIfhjgUrB9u8HSzPk7TUuQri9sXZrKzRXcScvwYor."
username: "admin"
userID: "1"
oauth2:
skipApprovalScreen: true
alwaysShowLoginScreen: false
passwordConnector: local
staticClients:
- id: "outline"
redirectURIs:
- https://${main_domain}/auth/oidc.callback
name: "Outline"
secret: "${client_secret}"
"""
[[config.mounts]]
filePath = "/etc/nginx/conf.d/default.conf"
content = """
server {
listen 5556;
location = / {
add_header Content-Type text/plain;
return 200 "Dex ready\n";
}
location / {
proxy_pass http://dex-server:5556;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
}
}
"""