11eeab1b51
* Use Base DN for LDAP and fetch user attrs Requires that a Base DN be set for LDAP Set `full_name` and `email` based on LDAP attributes when creating user * Add support for secure LDAP Allow insecure LDAP connection (disabled by default) Use CA when connecting to secure LDAP server * Added missing quotes to example * Update security.py * Update security.py formatting * Update security.py Switched to f-String formatting * formatting * Update test_security.py Added at attributes for testing * Update test_security.py Modified tests for base DN * Update test_security.py Set proper base DN for testing * Update test_security.py Corrected testing for LDAP * Update test_security.py Defined base_dn * Authenticated user not in base DN Add check for when user can authenticate but is not in base DN * Update test_security.py LDAP user cannot exist as it is searched before it is created and the list returns False Co-authored-by: Hayden <64056131+hay-kot@users.noreply.github.com>
44 lines
1 KiB
Bash
44 lines
1 KiB
Bash
# The Default Group Assigned to All Users
|
|
DEFAULT_GROUP=Home
|
|
|
|
# The Default Credentials for the Super User
|
|
DEFAULT_EMAIL=changeme@email.com
|
|
DEFAULT_PASSWORD=MyPassword
|
|
|
|
# Determines Production Mode, This will set the directory path to use for data storage
|
|
PRODUCTION=False
|
|
|
|
# API Port for Python Server
|
|
API_PORT=9000
|
|
|
|
# Exposes /docs and /redoc on the server
|
|
API_DOCS=True
|
|
|
|
# Sets the Database type to use. Note that in order for Postgres URI to be created, you must set DB_ENGINE=postgres
|
|
DB_ENGINE=sqlite # Optional: 'sqlite', 'postgres'
|
|
POSTGRES_USER=mealie
|
|
POSTGRES_PASSWORD=mealie
|
|
POSTGRES_SERVER=postgres
|
|
POSTGRES_PORT=5432
|
|
POSTGRES_DB=mealie
|
|
TOKEN_TIME=24
|
|
|
|
LANG=en-US
|
|
|
|
# NOT USED
|
|
# SMTP_HOST=""
|
|
# SMTP_PORT=""
|
|
# SMTP_FROM_NAME=""
|
|
# SMTP_AUTH_STRATEGY="" # Options: 'TLS', 'SSL', 'NONE'
|
|
# SMTP_FROM_EMAIL=""
|
|
# SMTP_USER=""
|
|
# SMTP_PASSWORD=""
|
|
|
|
# Configuration for authentication via an external LDAP server
|
|
LDAP_AUTH_ENABLED=False
|
|
LDAP_SERVER_URL=None
|
|
LDAP_TLS_INSECURE=False
|
|
LDAP_TLS_CACERTFILE=None
|
|
LDAP_BIND_TEMPLATE=None
|
|
LDAP_BASE_DN=None
|
|
LDAP_ADMIN_FILTER=None
|