160 lines
3.3 KiB
Markdown
160 lines
3.3 KiB
Markdown
# Extra documentation
|
|
|
|
These configurations are automated, so are here only by informational purposes.
|
|
|
|
## Keycloak configuration
|
|
|
|
Go to `https://sso.DOMAIN/auth/admin/master/console`
|
|
|
|
### THEMES
|
|
|
|
- [ ] login theme: dd
|
|
- [ ] account theme: account-avatar
|
|
- [ ] internazionalization enabled: ON
|
|
- [ ] default locale: ca
|
|
|
|
|
|
1. Configure -> Realm Settings -> Themes
|
|
|
|
Configure as this:
|
|
|
|
|
|
|
|
### SECURITY DEFENSES
|
|
|
|
- [ ] Change second line of Content-Security-Policy to:
|
|
`frame-src 'self'; frame-ancestors 'self' *.DOMAIN localhost; object-src 'none';`
|
|
|
|
- [ ] Last one to:
|
|
`max-age=31536000; includeSubDomains`
|
|
|
|
- [ ] Save
|
|
|
|
|
|
|
|
### CLIENT SCOPES
|
|
|
|
- [ ] client scopes => mappers => role_list => Single Role Attribute: ON
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
### CLIENT
|
|
|
|
- [ ] Clients -> Account-console -> Settings -> Add a *Valid Redirect URIs* "https://moodle.DOMAIN.net/*" in addition to the wp one "https://wp.DOMINI.net/*"
|
|
|
|
|
|
|
|
### EVENTS
|
|
|
|
|
|
|
|
|
|
### CLIENTS / account
|
|
|
|
Add a valid redirection URI
|
|
|
|
- [ ] `https://moodle.DOMAIN/*`
|
|
- [ ] `https://wp.DOMAIN/*`
|
|
- [ ] `/realms/master/account/*`
|
|
- [ ] `https://nextcloud.DOMAIN/*`
|
|
|
|
|
|
|
|
### Wordpress Configuration
|
|
|
|
|
|
|
|
|
|
|
|
Configure the nickname of Wordpress:
|
|
|
|
|
|
Script:
|
|
```
|
|
var Output = user.getFirstName()+" "+user.getLastName();
|
|
Output;
|
|
```
|
|
|
|
#### To allow closing the SAML session from Wordpress
|
|
|
|
|
|
|
|
Add these settings:
|
|
|
|
`/realms/master/account/*`
|
|
`https://wp.DOMAIN/*`
|
|
|
|
|
|
|
|
Save the configuration.
|
|
|
|
## Nextcloud configuration
|
|
|
|
### Email
|
|
- To configure email:
|
|
|
|
|
|
|
|
|
|
|
|
### Circles
|
|
|
|
1. To download the Circles application: Applications -> Featured apps -> Circles (Download and enable)
|
|
|
|
|
|
|
|
2. A new menu entry will exist in Settings
|
|
|
|
|
|
|
|
3. Get back to Settings and click "Administration" >> "Groupware" configuration:
|
|
|
|
|
|
|
|
It could be enabled by command line:
|
|
|
|
```
|
|
docker exec -u www-data dd-apps-nextcloud-app php occ --no-warnings config:app:set circles members_limit --value="150"
|
|
docker exec -u www-data dd-apps-nextcloud-app php occ --no-warnings config:app:set circles allow_linked_groups --value="1"
|
|
docker exec -u www-data dd-apps-nextcloud-app php occ --no-warnings config:app:set circles skip_invitation_to_closed_circles --value="1
|
|
```
|
|
|
|
### Other configurations
|
|
|
|
4. Add docker network as whitelist. Administration -> Security
|
|
|
|
|
|
5. Configure OnlyOffice templates in Nextcloud
|
|
|
|
|
|
|
|
And save
|
|
|
|
## Wordpress settings
|
|
|
|
### SAML2 plugin
|
|
|
|
|
|
**1. Login as admin in WordPress (with closed session in other environments): https://wp.\<domain\>/wp-login.php?normal**
|
|
|
|
**2. Enable plugin "OneLogin SAML SSO" and apply changes**
|
|
|
|
|
|
### Generate Block plugin and GeneratePress theme
|
|
|
|
Check that GenerateBlock plugin and GeneratePress theme are installed and enabled.
|
|
|
|
|
|
|
|
|
|
|
|
### Date and time
|
|
|
|
- To set up date and time:
|
|
|
|
|