Joey Hafner
93356aabe5
Per Authentik: https://goauthentik.io/integrations/services/grafana/ And Grafana: https://grafana.com/docs/grafana/latest/setup-grafana/configure-security/configure-authentication/generic-oauth/
22 lines
794 B
INI
22 lines
794 B
INI
force_migration = true
|
|
|
|
[server]
|
|
domain = grafana.jafner.net
|
|
root_url = %(protocol)s://%(domain)s/
|
|
force_migration = true
|
|
|
|
[auth.anonymous]
|
|
enabled = true
|
|
|
|
[auth.generic_oauth]
|
|
name = OAuth
|
|
icon = signin
|
|
enabled = true
|
|
client_id = 03e63420c70d5c7690b063918dd90f409f713baa
|
|
client_secret = a5b60606a3756dcf49e6a43eb3e581914fbc97a96e566bd1b84f42149cdc3b66d4cc93dca49d354f7ea61c5d97f0e61db2e8d3b2c4a162311d3548f19ecf791d
|
|
scopes = email openid profile
|
|
empty_scopes = false
|
|
auth_url = https://authentik.jafner.net/application/o/authorize/
|
|
token_url = https://authentik.jafner.net/application/o/token/
|
|
api_url = https://authentik.jafner.net/application/o/userinfo/
|
|
role_attribute_path = contains(groups[*], 'Grafana Admins') && 'Admin' || contains(groups[*], 'Grafana Editors') && 'Editor' || 'Viewer' |