docs(all): fix markdown syntax and snippets
This commit is contained in:
@@ -142,5 +142,5 @@ podman exec -it ca step ca certificate test.com test.crt test_key --provisioner
|
||||
### Firefox
|
||||
|
||||
- Setting - Security - view certificates - Authority - add
|
||||
- \[x\] trust this ca to identify website
|
||||
- \[x\] trust this ca to identify email users
|
||||
- `[x]` trust this ca to identify website
|
||||
- `[x]` trust this ca to identify email users
|
||||
|
||||
@@ -2,14 +2,14 @@
|
||||
|
||||
## Operation
|
||||
Refer to Ansible playbook
|
||||
\(Postgresql user and DB is needed\)
|
||||
\(LDAP strict readonly account is needed\)
|
||||
(Postgresql user and DB is needed)
|
||||
(LDAP strict readonly account is needed)
|
||||
|
||||
## Verification
|
||||
- Check Caddyfile \(without caddy, use 3000 ports\)
|
||||
- Check Caddyfile (without caddy, use 3000 ports)
|
||||
- https://grafana.ilnmors.internal
|
||||
- login with LDAP user
|
||||
- connection:data sources: \[prometheus|loki\]: provisioned
|
||||
- connection:data sources: `[prometheus|loki]`: provisioned
|
||||
- https://prometheus.ilnmors.internal:9090
|
||||
- https://loki.ilnmors.internal:3100
|
||||
|
||||
@@ -17,4 +17,4 @@ Refer to Ansible playbook
|
||||
|
||||
## Dashboard
|
||||
|
||||
- Dashboard isn't saved on local directory. They are saved on DB \(Postgresql\).
|
||||
- Dashboard isn't saved on local directory. They are saved on DB (Postgresql).
|
||||
+13
-13
@@ -1,6 +1,6 @@
|
||||
## Operation
|
||||
Refer to Ansible playbook
|
||||
\(Postgresql user and DB is needed\)
|
||||
(Postgresql user and DB is needed)
|
||||
|
||||
Integrate configuration with various app: https://github.com/lldap/lldap/blob/main/example_configs
|
||||
|
||||
@@ -8,7 +8,7 @@ Integrate configuration with various app: https://github.com/lldap/lldap/blob/ma
|
||||
### DB URL
|
||||
|
||||
Jinja2 `urlencode` module doesn't replace `/` as `%2F`. replace('/', '%2F') is necessary.
|
||||
ex\) {{ var | urlencode | replace('/', '%2F') }}
|
||||
ex) {{ var | urlencode | replace('/', '%2F') }}
|
||||
|
||||
### Reset administrator password
|
||||
|
||||
@@ -28,56 +28,56 @@ systemctl --user restart ldap.service
|
||||
|
||||
### Access web UI and Login
|
||||
|
||||
- URL: http://ldap.ilnmors.internal:17170 \(This is temporary access way before Caddy, which is reverse proxy, is set)
|
||||
- URL: http://ldap.ilnmors.internal:17170 (This is temporary access way before Caddy, which is reverse proxy, is set)
|
||||
- ID: admin
|
||||
- PW: $LLDAP_LDAP_USER_PASSWORD
|
||||
|
||||
### Create the groups
|
||||
|
||||
- Groups - \[\+\] Create a group
|
||||
- Groups - `[+]` Create a group
|
||||
- Group: admins
|
||||
- Group: users
|
||||
|
||||
It is necessary to manage ACL via authelia based on groups.
|
||||
|
||||
### Create the authelia user for OCID \(OP\)
|
||||
### Create the authelia user for OCID (OP)
|
||||
|
||||
- Users: \[\+\] Create a user
|
||||
- Users: `[+]` Create a user
|
||||
- Username (cn; uid): authelia
|
||||
- Display name: Authelia
|
||||
- First Name: Authelia
|
||||
- Last Name (sn): Service
|
||||
- Email (mail): authelia@ilnmors.internal
|
||||
- Password: "$(openssl rand -base64 32)"
|
||||
- Groups:lldap_strict_readonly: \[Add to group\]
|
||||
- Groups:lldap_strict_readonly: `[Add to group]`
|
||||
- This group allow search authority.
|
||||
- Users: \[\+\] Create a user
|
||||
- Users: `[+]` Create a user
|
||||
- Username (cn; uid): grafana
|
||||
- Display name: Grafana
|
||||
- First Name: Grafana
|
||||
- Last Name (sn): Service
|
||||
- Email (mail): grafana@ilnmors.internal
|
||||
- Password: "$(openssl rand -base64 32)"
|
||||
- Groups:lldap_strict_readonly: \[Add to group\]
|
||||
- Groups:lldap_strict_readonly: `[Add to group]`
|
||||
- This group allow search authority.
|
||||
> Save the password in .secret.yaml
|
||||
|
||||
### Create the normal users
|
||||
|
||||
- Users: \[\+\] Create a user
|
||||
- Users: `[+]` Create a user
|
||||
- Username (cn; uid): il
|
||||
- First Name: Il
|
||||
- Last Name (sn): Lee
|
||||
- Email (mail): il@ilnmors.internal
|
||||
- Password: "$PASSWORD"
|
||||
- Groups:lldap_admin&admins&users: \[Add to group\]
|
||||
- Users: \[\+\] Create a user
|
||||
- Groups:lldap_admin&admins&users: `[Add to group]`
|
||||
- Users: `[+]` Create a user
|
||||
- Username (cn; uid): user
|
||||
- First Name: John
|
||||
- Last Name (sn): Doe
|
||||
- Email (mail): john_doe@ilnmors.internal
|
||||
- Password: "$PASSWORD"
|
||||
- Groups:(admins|users): \[Add to group\]
|
||||
- Groups:(admins|users): `[Add to group]`
|
||||
|
||||
> Custom schema in `User schema`, `Group schema` doesn't need to be added. This is for advanced function to add additional value such as `identity number` or `phone number`. Hardcoded schema, which means basic schema the lldap provides is enough to use Authelia.
|
||||
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
## Operation
|
||||
Refer to Ansible playbook
|
||||
## Verification
|
||||
- fw@fw:/var/lib/bind$ curl -k https://loki.ilnmors.internal:3100/ready \(Node which is in NET_SERVER except infra itself\)
|
||||
- fw@fw:/var/lib/bind$ curl -k https://loki.ilnmors.internal:3100/ready (Node which is in NET_SERVER except infra itself)
|
||||
- ready
|
||||
- fw@fw:/var/lib/bind$ curl -k https://loki.ilnmors.internal:3100/metrics
|
||||
- metrics lists
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
## Operation
|
||||
Refer to Ansible playbook
|
||||
## Verification
|
||||
- Check Caddyfile \(without caddy, use 9090 ports\)
|
||||
- Check Caddyfile (without caddy, use 9090 ports)
|
||||
- https://prometheus.ilnmors.internal
|
||||
- Status:Target Health
|
||||
- Check `Endpoint localhost:9090 ` with green circle
|
||||
|
||||
Reference in New Issue
Block a user