31 lines
911 B
YAML
31 lines
911 B
YAML
|
headscale:
|
||
|
|
url: "http://headscale:8080"
|
||
|
|
api_key: "headscale-api-key"
|
||
|
|
|
||
|
|
oidc:
|
||
|
|
enabled: true
|
||
|
|
issuer_url: "http://keycloak:8080/realms/headscale"
|
||
|
|
client_id: "headplane-client"
|
||
|
|
client_secret: "headplane-client-secret"
|
||
|
|
scope: "openid profile email groups"
|
||
|
|
redirect_uri: "http://localhost:3000/admin/oidc/callback"
|
||
|
|
extra_params:
|
||
|
|
prompt: "select_account"
|
||
|
|
profile_picture_source: "oidc"
|
||
|
|
# For testing purposes, use the same API key for all users
|
||
|
|
# In production, you'd want proper API key management per user
|
||
|
|
headscale_api_key: "headscale-api-key"
|
||
|
|
|
||
|
|
# Group to role mapping configuration
|
||
|
|
role_mapping:
|
||
|
|
owner: ["headscale-owner", "owner"]
|
||
|
|
admin: ["headscale-admin", "admin", "administrators"]
|
||
|
|
network_admin: ["headscale-network", "network-admin"]
|
||
|
|
it_admin: ["headscale-it", "it-admin"]
|
||
|
|
auditor: ["headscale-audit", "auditor"]
|
||
|
|
|
||
|
|
integration:
|
||
|
|
provider: "docker"
|
||
|
|
|
||
|
|
log:
|
||
|
|
level: "info"
|