From 89d37f9935f3f1891d6b6a245f06a098ce8bf5c1 Mon Sep 17 00:00:00 2001 From: Martin Weise <martin.weise@tuwien.ac.at> Date: Fri, 19 Jul 2024 12:52:59 +0800 Subject: [PATCH] Updated guide --- .docs/installation.md | 14 ++++++++------ 1 file changed, 8 insertions(+), 6 deletions(-) diff --git a/.docs/installation.md b/.docs/installation.md index 0404133900..9c864ead46 100644 --- a/.docs/installation.md +++ b/.docs/installation.md @@ -47,10 +47,6 @@ curl -sSL https://gitlab.phaidra.org/fair-data-austria-db-repository/fda-service Call the helper script to regenerate the client secret of the `dbrepo-client` and set it as value of the `AUTH_SERVICE_CLIENT_SECRET` variable in the `.env` file. -```bash -curl -sSL "https://gitlab.phaidra.org/fair-data-austria-db-repository/fda-services/-/raw/release-1.4.5/.scripts/reg-client-secret.sh" | bash -``` - Update the rest of the default secrets in the `.env` file to secure passwords. You can use `openssl` for that, e.g. `openssl rand -hex 16`. Set `auth_ldap.dn_lookup_bind.password` in `dist/rabbitmq.conf` to the value of `SYSTEM_PASSWORD`. @@ -69,7 +65,7 @@ Log into the Auth Service with the default credentials `admin` and the value of :material-numeric-3-circle-outline:. <figure markdown> -{ .img-border } +{ .img-border } <figcaption>Figure 1: Select the Identity Service provider.</figcaption> </figure> @@ -78,9 +74,15 @@ but this is optional. Change the Bind credentials to the desired password :mater the variable `IDENTITY_SERVICE_ADMIN_PASSWORD` in `.env`. <figure markdown> -{ .img-border } +{ .img-border } <figcaption>Figure 2: Update the Identity Service admin user credentials.</figcaption> </figure> + +Update the client secret of the `dbrepo-client`: + +```bash +curl -sSL "https://gitlab.phaidra.org/fair-data-austria-db-repository/fda-services/-/raw/release-1.4.5/.scripts/reg-client-secret.sh" | bash +``` Also, update the JWT key according to the [Keycloak documentation](https://www.keycloak.org/docs/24.0.1/server_admin/index.html#rotating-keys). To secure your -- GitLab