1
0
forked from baron/baron-sso

OIDC 헤더 처리 위한 게이트웨이 및 인프라 설정

This commit is contained in:
2026-02-02 14:42:21 +09:00
parent 39296ca522
commit 8a9bbeeb88
3 changed files with 6 additions and 5 deletions

View File

@@ -92,7 +92,7 @@ services:
container_name: ory_hydra container_name: ory_hydra
environment: environment:
- DSN=postgres://${ORY_POSTGRES_USER}:${ORY_POSTGRES_PASSWORD}@postgres_ory:5432/${HYDRA_DB:-ory_hydra}?sslmode=disable&max_conns=20 - DSN=postgres://${ORY_POSTGRES_USER}:${ORY_POSTGRES_PASSWORD}@postgres_ory:5432/${HYDRA_DB:-ory_hydra}?sslmode=disable&max_conns=20
- URLS_SELF_ISSUER=${HYDRA_PUBLIC_URL:-http://localhost:5000/oidc} - URLS_SELF_ISSUER=${USERFRONT_URL:-http://localhost:5000}/oidc
- URLS_LOGIN=${USERFRONT_URL:-http://localhost:5000}/login - URLS_LOGIN=${USERFRONT_URL:-http://localhost:5000}/login
- URLS_CONSENT=${USERFRONT_URL:-http://localhost:5000}/consent - URLS_CONSENT=${USERFRONT_URL:-http://localhost:5000}/consent
- SECRETS_SYSTEM=${ORY_POSTGRES_PASSWORD} - SECRETS_SYSTEM=${ORY_POSTGRES_PASSWORD}
@@ -106,8 +106,6 @@ services:
- ory-net - ory-net
- hydranet - hydranet
# --- Keto --- # --- Keto ---
keto-migrate: keto-migrate:
image: oryd/keto:${KETO_VERSION:-v25.4.0} image: oryd/keto:${KETO_VERSION:-v25.4.0}
@@ -229,8 +227,8 @@ services:
- hydranet - hydranet
volumes: volumes:
ory_postgres_data: ory_postgres_data:
ory_clickhouse_data: ory_clickhouse_data:
networks: networks:
ory-net: ory-net:

View File

@@ -95,6 +95,7 @@ services:
- APP_ENV=${APP_ENV} - APP_ENV=${APP_ENV}
networks: networks:
- baron_net - baron_net
- ory-net
depends_on: depends_on:
backend: backend:
condition: service_healthy condition: service_healthy

View File

@@ -21,6 +21,8 @@ log_format json_combined escape=json
server { server {
listen 5000; listen 5000;
client_header_buffer_size 16k;
large_client_header_buffers 4 64k;
include /etc/nginx/mime.types; include /etc/nginx/mime.types;
resolver 127.0.0.11 valid=10s ipv6=off; resolver 127.0.0.11 valid=10s ipv6=off;