Sanitized single-commit public mirror of recipe-maintainer. - Removed test-ssh/.testenv (live creds); added test-ssh/.testenv.example placeholders. - Removed plans/ and planned-updates/ (deployment-planning docs) so no client/ deployment domains appear in the public repo. - All other secret stores were already gitignored. - docs.coopcloud.tech retained as a submodule (public upstream).
1.6 KiB
1.6 KiB
La Suite Drive — First-Time Setup
Prerequisites
- DNS:
lasuite-drive.<domain_suffix>must resolve to the server - Keycloak must be deployed and running (dependency)
Steps
-
Create the app:
abra app new lasuite-drive --server <SERVER> --domain lasuite-drive.<DOMAIN_SUFFIX> --no-input -
Generate secrets:
abra app secret generate lasuite-drive.<DOMAIN_SUFFIX> --all -m --no-inputSave output to
recipe-info/testsecrets/lasuite-drive.<DOMAIN_SUFFIX>. -
Deploy:
abra app deploy lasuite-drive.<DOMAIN_SUFFIX> --chaos --force --no-input -
Post-deploy — Migrations:
script -qefc 'abra app cmd lasuite-drive.<DOMAIN_SUFFIX> backend migrate --no-input' /dev/null -
Post-deploy — Minio buckets:
abra app restart lasuite-drive.<DOMAIN_SUFFIX> minio-createbuckets --no-inputThis will appear to hang — that is expected. Wait for it to complete.
-
Keycloak SSO integration:
python3 recipe-info/lasuite-drive/setup_keycloak_integration.pyThis creates a
lasuite-driverealm, OIDC client, and test user in Keycloak. It also inserts the client secret and updates the env file. -
Redeploy with SSO config:
abra app deploy lasuite-drive.<DOMAIN_SUFFIX> --chaos --force --no-input -
Verify: curl
https://lasuite-drive.<DOMAIN_SUFFIX>returns HTTP 200.
Notes
- Credentials are saved to
recipe-info/lasuite-drive/keycloak-test-credentials.<DOMAIN_SUFFIX>.toml. - OIDC test user:
testuser/testpass123.