# La Suite Drive — First-Time Setup

## Prerequisites

- DNS: `lasuite-drive.<domain_suffix>` must resolve to the server
- **Keycloak** must be deployed and running (dependency)

## Steps

1. **Create the app:**
   ```bash
   abra app new lasuite-drive --server <SERVER> --domain lasuite-drive.<DOMAIN_SUFFIX> --no-input
   ```

2. **Generate secrets:**
   ```bash
   abra app secret generate lasuite-drive.<DOMAIN_SUFFIX> --all -m --no-input
   ```
   Save output to `recipe-info/testsecrets/lasuite-drive.<DOMAIN_SUFFIX>`.

3. **Deploy:**
   ```bash
   abra app deploy lasuite-drive.<DOMAIN_SUFFIX> --chaos --force --no-input
   ```

4. **Post-deploy — Migrations:**
   ```bash
   script -qefc 'abra app cmd lasuite-drive.<DOMAIN_SUFFIX> backend migrate --no-input' /dev/null
   ```

5. **Post-deploy — Minio buckets:**
   ```bash
   abra app restart lasuite-drive.<DOMAIN_SUFFIX> minio-createbuckets --no-input
   ```
   This will appear to hang — that is expected. Wait for it to complete.

6. **Keycloak SSO integration:**
   ```bash
   python3 recipe-info/lasuite-drive/setup_keycloak_integration.py
   ```
   This creates a `lasuite-drive` realm, OIDC client, and test user in Keycloak. It also inserts the client secret and updates the env file.

7. **Redeploy with SSO config:**
   ```bash
   abra app deploy lasuite-drive.<DOMAIN_SUFFIX> --chaos --force --no-input
   ```

8. **Verify:** curl `https://lasuite-drive.<DOMAIN_SUFFIX>` returns HTTP 200.

## Notes

- Credentials are saved to `recipe-info/lasuite-drive/keycloak-test-credentials.<DOMAIN_SUFFIX>.toml`.
- OIDC test user: `testuser` / `testpass123`.