docs(all): fix markdown syntax and snippets

This commit is contained in:
il
2026-05-09 20:54:32 +09:00
parent 81244d55a7
commit 64aad4fcf0
43 changed files with 229 additions and 209 deletions
+2 -2
View File
@@ -142,5 +142,5 @@ podman exec -it ca step ca certificate test.com test.crt test_key --provisioner
### Firefox
- Setting - Security - view certificates - Authority - add
- \[x\] trust this ca to identify website
- \[x\] trust this ca to identify email users
- `[x]` trust this ca to identify website
- `[x]` trust this ca to identify email users
+5 -5
View File
@@ -2,14 +2,14 @@
## Operation
Refer to Ansible playbook
\(Postgresql user and DB is needed\)
\(LDAP strict readonly account is needed\)
(Postgresql user and DB is needed)
(LDAP strict readonly account is needed)
## Verification
- Check Caddyfile \(without caddy, use 3000 ports\)
- Check Caddyfile (without caddy, use 3000 ports)
- https://grafana.ilnmors.internal
- login with LDAP user
- connection:data sources: \[prometheus|loki\]: provisioned
- connection:data sources: `[prometheus|loki]`: provisioned
- https://prometheus.ilnmors.internal:9090
- https://loki.ilnmors.internal:3100
@@ -17,4 +17,4 @@ Refer to Ansible playbook
## Dashboard
- Dashboard isn't saved on local directory. They are saved on DB \(Postgresql\).
- Dashboard isn't saved on local directory. They are saved on DB (Postgresql).
+13 -13
View File
@@ -1,6 +1,6 @@
## Operation
Refer to Ansible playbook
\(Postgresql user and DB is needed\)
(Postgresql user and DB is needed)
Integrate configuration with various app: https://github.com/lldap/lldap/blob/main/example_configs
@@ -8,7 +8,7 @@ Integrate configuration with various app: https://github.com/lldap/lldap/blob/ma
### DB URL
Jinja2 `urlencode` module doesn't replace `/` as `%2F`. replace('/', '%2F') is necessary.
ex\) {{ var | urlencode | replace('/', '%2F') }}
ex) {{ var | urlencode | replace('/', '%2F') }}
### Reset administrator password
@@ -28,56 +28,56 @@ systemctl --user restart ldap.service
### Access web UI and Login
- URL: http://ldap.ilnmors.internal:17170 \(This is temporary access way before Caddy, which is reverse proxy, is set)
- URL: http://ldap.ilnmors.internal:17170 (This is temporary access way before Caddy, which is reverse proxy, is set)
- ID: admin
- PW: $LLDAP_LDAP_USER_PASSWORD
### Create the groups
- Groups - \[\+\] Create a group
- Groups - `[+]` Create a group
- Group: admins
- Group: users
It is necessary to manage ACL via authelia based on groups.
### Create the authelia user for OCID \(OP\)
### Create the authelia user for OCID (OP)
- Users: \[\+\] Create a user
- Users: `[+]` Create a user
- Username (cn; uid): authelia
- Display name: Authelia
- First Name: Authelia
- Last Name (sn): Service
- Email (mail): authelia@ilnmors.internal
- Password: "$(openssl rand -base64 32)"
- Groups:lldap_strict_readonly: \[Add to group\]
- Groups:lldap_strict_readonly: `[Add to group]`
- This group allow search authority.
- Users: \[\+\] Create a user
- Users: `[+]` Create a user
- Username (cn; uid): grafana
- Display name: Grafana
- First Name: Grafana
- Last Name (sn): Service
- Email (mail): grafana@ilnmors.internal
- Password: "$(openssl rand -base64 32)"
- Groups:lldap_strict_readonly: \[Add to group\]
- Groups:lldap_strict_readonly: `[Add to group]`
- This group allow search authority.
> Save the password in .secret.yaml
### Create the normal users
- Users: \[\+\] Create a user
- Users: `[+]` Create a user
- Username (cn; uid): il
- First Name: Il
- Last Name (sn): Lee
- Email (mail): il@ilnmors.internal
- Password: "$PASSWORD"
- Groups:lldap_admin&admins&users: \[Add to group\]
- Users: \[\+\] Create a user
- Groups:lldap_admin&admins&users: `[Add to group]`
- Users: `[+]` Create a user
- Username (cn; uid): user
- First Name: John
- Last Name (sn): Doe
- Email (mail): john_doe@ilnmors.internal
- Password: "$PASSWORD"
- Groups:(admins|users): \[Add to group\]
- Groups:(admins|users): `[Add to group]`
> Custom schema in `User schema`, `Group schema` doesn't need to be added. This is for advanced function to add additional value such as `identity number` or `phone number`. Hardcoded schema, which means basic schema the lldap provides is enough to use Authelia.
+1 -1
View File
@@ -3,7 +3,7 @@
## Operation
Refer to Ansible playbook
## Verification
- fw@fw:/var/lib/bind$ curl -k https://loki.ilnmors.internal:3100/ready \(Node which is in NET_SERVER except infra itself\)
- fw@fw:/var/lib/bind$ curl -k https://loki.ilnmors.internal:3100/ready (Node which is in NET_SERVER except infra itself)
- ready
- fw@fw:/var/lib/bind$ curl -k https://loki.ilnmors.internal:3100/metrics
- metrics lists
+1 -1
View File
@@ -3,7 +3,7 @@
## Operation
Refer to Ansible playbook
## Verification
- Check Caddyfile \(without caddy, use 9090 ports\)
- Check Caddyfile (without caddy, use 9090 ports)
- https://prometheus.ilnmors.internal
- Status:Target Health
- Check `Endpoint localhost:9090 ` with green circle