From e61286d2b31a2ec3f2acf54d6b6ca99ca690a895 Mon Sep 17 00:00:00 2001 From: Oier Bravo Urtasun Date: Sun, 24 May 2026 04:38:41 +0200 Subject: [PATCH] feat(drasl): add config.toml.tmpl (password login, SignPublicKeys=false) Co-Authored-By: Claude Opus 4.7 (1M context) --- drasl/config/config.toml.tmpl | 23 +++++++++++++++++++++++ 1 file changed, 23 insertions(+) create mode 100644 drasl/config/config.toml.tmpl diff --git a/drasl/config/config.toml.tmpl b/drasl/config/config.toml.tmpl new file mode 100644 index 0000000..f9bc023 --- /dev/null +++ b/drasl/config/config.toml.tmpl @@ -0,0 +1,23 @@ +# Drasl config — password-login mode (NO Keycloak/OIDC for now). +# TOML only (drasl has no env support). Rendered by tooling/render-config.sh +# -> drasl/config/config.toml (gitignored). Only ${BASE_DOMAIN} is substituted. +# Reached only via Caddy at auth.${BASE_DOMAIN}; drasl has no published host port. + +BaseURL = "http://auth.${BASE_DOMAIN}" +Domain = "auth.${BASE_DOMAIN}" +ListenAddress = "0.0.0.0:25585" # internal; Caddy reverse-proxies to it +DefaultAdminUsernames = ["admin"] + +# Password login: admin + guests register a username/password on the web UI. +AllowPasswordLogin = true + +# 1.21+ secure-profile fix: MUST pair with server ENFORCE_SECURE_PROFILE=FALSE. +# Both or neither — mixed auth breaks on MC 1.21+ with SignPublicKeys = true. +SignPublicKeys = false + +[ApplicationOwner] +Name = "Ulicraft" +Email = "admin@${BASE_DOMAIN}" + +# OIDC block intentionally omitted for now (no Keycloak). +# [[RegistrationOIDC]] <- future task