2021-12-27 15:17:32 +01:00
|
|
|
Terraform for Keycloak
|
|
|
|
|
======================
|
|
|
|
|
|
|
|
|
|
This contains the Terraform configuration for deploying TVL's Keycloak
|
|
|
|
|
instance (which lives at `auth.tvl.fyi`).
|
|
|
|
|
|
|
|
|
|
Secrets are needed for applying this. The encrypted file
|
|
|
|
|
`//ops/secrets/tf-keycloak.age` contains `export` calls which should
|
|
|
|
|
be sourced, for example via `direnv`, by users with the appropriate
|
|
|
|
|
credentials.
|
|
|
|
|
|
|
|
|
|
An example `direnv` configuration used by tazjin is this:
|
|
|
|
|
|
|
|
|
|
```
|
2022-06-04 01:08:51 +02:00
|
|
|
# //ops/keycloak/.envrc
|
2021-12-27 15:17:32 +01:00
|
|
|
source_up
|
|
|
|
|
eval $(age --decrypt -i ~/.ssh/id_ed25519 $(git rev-parse --show-toplevel)/ops/secrets/tf-keycloak.age)
|
|
|
|
|
```
|
