Differences

This shows you the differences between two versions of the page.

--- hosts:virtual_machines:enclave:keycloak [2023/02/21 01:30] – created netbox
+++ hosts:virtual_machines:enclave:keycloak [2024/10/02 11:49] (current) – [Configuration locations] merlin
@@ Line 1: / Line 1: @@
 [[meta:autogen:start|]]
+===== Keycloak =====
 ^ Name | Keycloak |
 ^ Ports | 8443 (tcp) |
 ^  | [[https://netbox.tardisproject.uk/ipam/services/15/|View in NetBox.]] |
 [[meta:autogen:end|]]
-====== NAME ======
-^ Port(s) |  |
+Provides [[https://www.onelogin.com/learn/how-single-sign-on-works|OpenID (Single Sign-On)]]. User information is federated from [[hosts:virtual_machines:enclave:ldap|LDAP]], and password authentication is done through [[hosts:virtual_machines:enclave:mit_kerberos_kdc|Kerberos]].
-^ Publicly Accessible?   |  |
-^ Upstream       |  |
-Brief description of what the service is.
+Because it misbehaves otherwise, this uses SSL with a certificate issued by [[hosts:virtual_machines:enclave:smallstep_ca|Step CA]].
 ===== Data directories =====
-  * ''/var/lib/...''
+  * ''/var/lib/postgresql/''
 ===== Configuration locations =====
-  * ''/etc/...''
+Handled declaratively through [[https://git.tardisproject.uk/tardis/nix/-/blob/main/profiles/keycloak/default.nix|Nix]].
+Clients, Realms & Providers configured using the [[https://id.tardisproject.uk/admin|administration UI]].