synapse change to oidc

This commit is contained in:
Philip Haupt
2025-09-09 23:46:54 +02:00
parent 9a67c74460
commit 28ec0a6b08
2 changed files with 22 additions and 8 deletions

View File

@@ -139,10 +139,10 @@ config:
## Registration configuration, note that registration with the
## container-internal register_new_matrix_user tool is always possible.
##
enableRegistration: true
enableRegistration: false
## NB; this value will default to a random string if not specified.
registrationSharedSecret: 123654
registrationSharedSecret: ''
## NB; Strongly recommended to set this to a secure value.
# macaroonSecretKey: ''
@@ -181,7 +181,18 @@ config:
## Ref: https://github.com/matrix-org/synapse/blob/develop/docs/sample_config.yaml
##
extraConfig:
registration_requires_token: true
oidc_providers:
- idp_id: keycloak
idp_name: "Born In Pain"
issuer: "https://iam.borninpain.de/auth/realms/home"
client_id: "synapse"
client_secret: "DOXPkkV2TUvgBBoQL4gng9e1pUvZeIFo"
scopes: ["openid", "profile"]
user_mapping_provider:
config:
localpart_template: "{{ user.preferred_username }}"
display_name_template: "{{ user.name }}"
# old_signing_keys:
# "ed25519:id": { key: "base64string", expired_ts: 123456789123 }
# use_presence: false