Fix review notes

This commit is contained in:
braginini
2022-08-17 18:18:15 +02:00
parent 40e88a30a5
commit 9bb83e46b8
2 changed files with 16 additions and 10 deletions

View File

@@ -53,16 +53,21 @@ To simplify the setup we have prepared a script to substitute required propertie
The [setup.env.example](https://github.com/netbirdio/netbird/tree/main/infrastructure_files/setup.env.example) file contains multiple properties that have to be filled. You need to copy the example file to `setup.env` before updating it. The [setup.env.example](https://github.com/netbirdio/netbird/tree/main/infrastructure_files/setup.env.example) file contains multiple properties that have to be filled. You need to copy the example file to `setup.env` before updating it.
```bash ```bash
## example file, you can copy this file to setup.env and update its values
##
# Dashboard domain. e.g. app.mydomain.com # Dashboard domain. e.g. app.mydomain.com
NETBIRD_DOMAIN="" NETBIRD_DOMAIN=""
# e.g. dev-24vkclam.us.auth0.com # e.g. https://dev-24vkclam.us.auth0.com/ or https://YOUR-KEYCLOAK-HOST:8080/realms/netbird
NETBIRD_AUTH0_DOMAIN="" NETBIRD_AUTH_AUTHORITY=""
# e.g. 61u3JMXRO0oOevc7gCkZLCwePQvT4lL0 # e.g. netbird-client
NETBIRD_AUTH0_CLIENT_ID="" NETBIRD_AUTH_CLIENT_ID=""
# e.g. https://app.mydomain.com/ or https://app.mydomain.com, # indicates whether to use Auth0 or not: true or false
# Make sure you used the exact same value for Identifier NETBIRD_USE_AUTH0=""
# you used when creating your Auth0 API # a list of scopes supported e.g. `openid profile email` for keycloak or `openid profile email api offline_access email_verified` for Auth0
NETBIRD_AUTH0_AUDIENCE="" NETBIRD_AUTH_SUPPORTED_SCOPES=""
NETBIRD_AUTH_AUDIENCE=""
# URL of the JWT certificates e.g. https://dev-24vkclam.us.auth0.com/.well-known/jwks.json
NETBIRD_AUTH_JWT_CERTS=""
# e.g. hello@mydomain.com # e.g. hello@mydomain.com
NETBIRD_LETSENCRYPT_EMAIL="" NETBIRD_LETSENCRYPT_EMAIL=""
``` ```

View File

@@ -102,6 +102,7 @@ In this step we will configure NetBird application client access with the NetBir
- Valid redirect URIs: `https://YOUR DOMAIN/*` - Valid redirect URIs: `https://YOUR DOMAIN/*`
- Valid post logout redirect URIs: `https://YOUR DOMAIN/*` - Valid post logout redirect URIs: `https://YOUR DOMAIN/*`
- Web origins: `+` - Web origins: `+`
- Click `Save`
![](/img/integrations/identity-providers/self-hosted/keycloak-access-settings.png) ![](/img/integrations/identity-providers/self-hosted/keycloak-access-settings.png)
@@ -116,12 +117,12 @@ In this step, we will create and configure the NetBird client audience for Keycl
- Fill in the form with the following values: - Fill in the form with the following values:
- Name: `netbird-client-audience` - Name: `netbird-client-audience`
- Type: `Default` - Type: `Default`
- Type: `OpenID Connect` - Protocol: `OpenID Connect`
- Click `Save` - Click `Save`
![](/img/integrations/identity-providers/self-hosted/keycloak-create-client-scope.png) ![](/img/integrations/identity-providers/self-hosted/keycloak-create-client-scope.png)
- Switch to the `Mappers` tab - While in the newly created Client Scope, switch to the `Mappers` tab
- Click `Configure a new mapper` - Click `Configure a new mapper`
- Choose the `Audience` mapping - Choose the `Audience` mapping