diff --git a/inventories/vagrant/host_vars/backend/garage.yml b/inventories/vagrant/host_vars/backend/garage.yml index dd139e9..56cb1a9 100644 --- a/inventories/vagrant/host_vars/backend/garage.yml +++ b/inventories/vagrant/host_vars/backend/garage.yml @@ -17,4 +17,8 @@ garage_s3_keys: - name: "nextcloud-backup" buckets: - name: "nextcloud" - permissions: ["read"] \ No newline at end of file + permissions: ["read"] + - name: "opencloud" + buckets: + - name: "opencloud" + permissions: ["read", "write"] \ No newline at end of file diff --git a/inventories/vagrant/host_vars/backend/opencloud.yml b/inventories/vagrant/host_vars/backend/opencloud.yml index 286befe..627e601 100644 --- a/inventories/vagrant/host_vars/backend/opencloud.yml +++ b/inventories/vagrant/host_vars/backend/opencloud.yml @@ -3,6 +3,7 @@ opencloud_admin_password: "admin" opencloud_extra_hosts: - "opencloud.local.test:host-gateway" - "keycloak.local.test:host-gateway" + - "storage.local.test:192.168.56.11" # OIDC configuration (Keycloak) opencloud_oidc_issuer: "https://keycloak.local.test/realms/vagrant" @@ -10,6 +11,13 @@ opencloud_oidc_client_id: "opencloud" opencloud_oidc_client_secret: "opencloud-secret-change-in-production" opencloud_oidc_account_edit_url: "https://keycloak.local.test/realms/vagrant/account" +# S3 storage configuration using Garage +opencloud_use_s3_storage: true +opencloud_s3_endpoint: "http://{{ hostvars['backend']['garage_s3_domain'] }}" +opencloud_s3_access_key: "{{ lookup('digitalboard.core.garage_credentials', 'opencloud', host='backend')['key_id'] }}" +opencloud_s3_secret_key: "{{ lookup('digitalboard.core.garage_credentials', 'opencloud', host='backend')['secret_key'] }}" +opencloud_s3_bucket: "opencloud" + # Allow OpenCloud to connect to Keycloak for OIDC discovery opencloud_csp_extra_connect_src: - "https://keycloak.local.test/" \ No newline at end of file