diff --git a/roles/myconext/tasks/main.yml b/roles/myconext/tasks/main.yml index 54c425e86..0d386520d 100644 --- a/roles/myconext/tasks/main.yml +++ b/roles/myconext/tasks/main.yml @@ -207,7 +207,45 @@ - source: /opt/openconext/myconext/apple-app-site-association target: /var/www/.well-known/apple-app-site-association type: bind + env: + HTTPD_CSP: "{{ httpd_csp.lenient_with_static_img_for_idp }}" + HTTPD_SERVERNAME: "login.{{ myconext_base_domain }}" +- name: Create the servicedesk gui + community.docker.docker_container: + name: servicedeskgui + image: ghcr.io/openconext/openconext-myconext/servicedesk-gui:{{ servicedesk_gui_version }} + pull: true + restart_policy: "always" + state: started + networks: + - name: "loadbalancer" + labels: + traefik.http.routers.servicedeskgui.rule: "Host(`servicedesk.{{ myconext_base_domain }}`)" + traefik.http.routers.servicedeskgui.tls: "true" + traefik.enable: "true" + healthcheck: + test: ["CMD", "curl", "--fail" , "http://localhost"] + interval: 10s + timeout: 10s + retries: 3 + start_period: 10s + mounts: + - source: /etc/localtime + target: /etc/localtime + type: bind + - source: /opt/openconext/common/favicon.ico + target: /var/www/favicon.ico + type: bind + - source: /opt/openconext/myconext/apple-app-site-association + target: /var/www/.well-known/apple-app-site-association + type: bind env: HTTPD_CSP: "{{ httpd_csp.lenient_with_static_img_for_idp }}" HTTPD_SERVERNAME: "login.{{ myconext_base_domain }}" + OPENCONEXT_INSTANCENAME: "{{ instance_name }}" + OPENCONEXT_ENGINE_LOGOUT_URL: "https://engine.{{ base_domain }}/logout" + OPENCONEXT_HELP_EMAIL: "{{ support_email }}" + SHIB_ENTITYID: "https://servicedesk.{{ myconext_base_domain }}/shibboleth" + SHIB_REMOTE_ENTITYID: "https://engine.{{ base_domain }}/authentication/idp/metadata" + SHIB_REMOTE_METADATA: "{{ shibboleth_metadata_sources.engine }}" diff --git a/roles/springboot/defaults/main.yml b/roles/springboot/defaults/main.yml index a3219e7c1..def37fca6 100644 --- a/roles/springboot/defaults/main.yml +++ b/roles/springboot/defaults/main.yml @@ -27,6 +27,11 @@ springboot_gui_services: group: myconext enabled: "{{ springboot_services_state.account }}" version: "{{ account_gui_version }}" + - name: servicedesk + alias: servicedesk-gui + group: myconext + enabled: "{{ springboot_services_state.servicedesk }}" + version: "{{ servicedesk_gui_version }}" springboot_server_services: - name: manage