* feat: add SSO environment variable support for OKTA and Google OAuth2
Add native support for SSO configuration through environment variables
and Docker secrets, eliminating the need to modify configuration.py
for common SSO providers.
Changes:
- Add OKTA OpenID Connect configuration variables:
- SOCIAL_AUTH_OKTA_OPENIDCONNECT_KEY (env var)
- SOCIAL_AUTH_OKTA_OPENIDCONNECT_SECRET (env var + Docker secret: okta_openidconnect_secret)
- SOCIAL_AUTH_OKTA_OPENIDCONNECT_API_URL (env var)
- Add Google OAuth2 configuration variables:
- SOCIAL_AUTH_GOOGLE_OAUTH2_KEY (env var)
- SOCIAL_AUTH_GOOGLE_OAUTH2_SECRET (env var + Docker secret: google_oauth2_secret)
Follows existing patterns with _read_secret() for sensitive data and
environ.get() for non-sensitive configuration.
Resolves: netbox-community/netbox-docker#1139
* Secrets example
* fix: add newline at end of file
---------
Co-authored-by: skyefugate <skyefugate@users.noreply.github.com>
This change exposes the Django setting AUTH_LDAP_ALWAYS_UPDATE_USER as environment variable to simplify deployments with readonly databases and LDAP based authentication as no extra file is required to be mounted into the container anymore.
Setting the BASE_PATH is a more involved process than just setting this variable.
To prevent surprises the option to set this via ENV variable was removed.
- Reports and Scripts have changed in Netbox 3.5. They need to be uploaded now.
The Docker compose now creates a volume as it does for the media files
- Napalm has been removed from Netbox 3.5
All configuration entries for Napalm were removed and napalm itself is removed from the requirements file
- Removed Gunicorn from the image
Nginx Unit has been used for a while now. No need to install Gunicorn
add missing AUTH_LDAP_USER_SEARCH, removed while modifying....
revert AUTH_LDAP_USER_SEARCH variable that was accidentally removed in #931 and change behaviour to requested features in #471
remove duplicate AUTH_LDAP_USER_SEARCH variable now and fix this finally, hopefully