diff --git a/gateway/authelia/config/configuration.yml b/gateway/authelia/config/configuration.yml index 55b46ca..7c36bbf 100644 --- a/gateway/authelia/config/configuration.yml +++ b/gateway/authelia/config/configuration.yml @@ -133,3 +133,24 @@ identity_providers: - form_post - query - fragment + - client_id: 'GXbZWCII_iRwoQAjtpP6WzXDKagzYZC~dRSq3QMgJyb3RrvcPG0n.Elm3NnEpq8LLh_uZktw' + client_name: 'Stirling-PDF' + client_secret: {{ secret "/run/secrets/STIRLING_PDF_CLIENT_SECRET" }} + public: false + authorization_policy: 'two_factor' + require_pkce: false + pkce_challenge_method: '' + redirect_uris: + - 'https://stirling-pdf.64815139.xyz/login/oauth2/code/oidc' + scopes: + - 'openid' + - 'profile' + - 'groups' + - 'email' + response_types: + - 'code' + grant_types: + - 'authorization_code' + access_token_signed_response_alg: 'none' + userinfo_signed_response_alg: 'none' + token_endpoint_auth_method: 'client_secret_basic' diff --git a/gateway/caddy/Caddyfile b/gateway/caddy/Caddyfile index dd7087a..78176bc 100644 --- a/gateway/caddy/Caddyfile +++ b/gateway/caddy/Caddyfile @@ -58,6 +58,12 @@ immich.64815139.xyz { } } +stirling-pdf.64815139.xyz { + route { + reverse_proxy 192.168.0.216:3328 + } +} + uptime.64815139.xyz { route { reverse_proxy 192.168.0.216:4393 diff --git a/gateway/cloudflare-ddns/config.json b/gateway/cloudflare-ddns/config.json index 2079d7c..faf68d9 100644 --- a/gateway/cloudflare-ddns/config.json +++ b/gateway/cloudflare-ddns/config.json @@ -26,6 +26,10 @@ "name": "immich", "proxied": false }, + { + "name": "stirling-pdf", + "proxied": false + }, { "name": "uptime", "proxied": false diff --git a/gateway/dashboard/assets/icons/stirling-pdf.svg b/gateway/dashboard/assets/icons/stirling-pdf.svg new file mode 100644 index 0000000..c62bd8e --- /dev/null +++ b/gateway/dashboard/assets/icons/stirling-pdf.svg @@ -0,0 +1 @@ + \ No newline at end of file diff --git a/gateway/dashboard/index.html b/gateway/dashboard/index.html index 1263ee3..c5d0d06 100644 --- a/gateway/dashboard/index.html +++ b/gateway/dashboard/index.html @@ -12,6 +12,14 @@

Hello {{.Req.Header.Get "Remote-Name"}}

diff --git a/gateway/dashboard/styles.css b/gateway/dashboard/styles.css index ac19f0c..6c230fc 100644 --- a/gateway/dashboard/styles.css +++ b/gateway/dashboard/styles.css @@ -78,7 +78,7 @@ body { .app-name { margin-top: 16px; - font-size: 16px; + font-size: 14px; font-weight: bold; height: 20%; display: flex; diff --git a/gateway/docker-compose.yml b/gateway/docker-compose.yml index 4dfc557..f8303fa 100644 --- a/gateway/docker-compose.yml +++ b/gateway/docker-compose.yml @@ -24,6 +24,8 @@ secrets: file: './authelia/secrets/clients/IMMICH_CLIENT_SECRET' GITEA_CLIENT_SECRET: file: './authelia/secrets/clients/GITEA_CLIENT_SECRET' + STIRLING_PDF_CLIENT_SECRET: + file: './authelia/secrets/clients/STIRLING_PDF_CLIENT_SECRET' services: authelia: image: 'docker.io/authelia/authelia:latest' @@ -47,6 +49,7 @@ services: - OIDC_JWKS_AUTHELIA_CERT - IMMICH_CLIENT_SECRET - GITEA_CLIENT_SECRET + - STIRLING_PDF_CLIENT_SECRET environment: AUTHELIA_IDENTITY_VALIDATION_RESET_PASSWORD_JWT_SECRET_FILE: /run/secrets/JWT_SECRET AUTHELIA_SESSION_SECRET_FILE: /run/secrets/SESSION_SECRET diff --git a/stirling-pdf/docker-compose.yml b/stirling-pdf/docker-compose.yml new file mode 100644 index 0000000..141e5f0 --- /dev/null +++ b/stirling-pdf/docker-compose.yml @@ -0,0 +1,29 @@ +name: stirlingpdf +services: + app: + image: docker.stirlingpdf.com/stirlingtools/stirling-pdf:latest + ports: + - '3328:8080' + volumes: + - ./data/trainingData:/usr/share/tessdata + - ./data/extraConfigs:/configs + - ./data/customFiles:/customFiles/ + - ./data/logs:/logs/ + - ./data/pipeline:/pipeline/ + env_file: + - ./secrets/.env + environment: + DISABLE_ADDITIONAL_FEATURES: false + DOCKER_ENABLE_SECURITY: true + LANGS: en_GB + SECURITY_ENABLE_LOGIN: true + SECURITY_LOGINMETHOD: 'oauth2' + SECURITY_OAUTH2_ENABLED: true + SECURITY_OAUTH2_AUTOCREATEUSER: true + SECURITY_OAUTH2_ISSUER: 'https://auth.64815139.xyz' + SECURITY_OAUTH2_CLIENTID: 'GXbZWCII_iRwoQAjtpP6WzXDKagzYZC~dRSq3QMgJyb3RrvcPG0n.Elm3NnEpq8LLh_uZktw' + SECURITY_OAUTH2_BLOCKREGISTRATION: false + SECURITY_OAUTH2_SCOPES: 'openid, profile, email' + SECURITY_OAUTH2_USEASUSERNAME: 'preferred_username' + SECURITY_OAUTH2_PROVIDER: 'Authelia' + SYSTEM_GOOGLEVISIBILITY: false