小工具--Dashy基于Kecloak认证
1.简介
Dashy 是一款既美观又实用的书签管理工具
2.环境准备
-
Linux CentOS 7.6 docker
3.部署docker
[root@learn-1 ~]# yum install docker -y [root@learn-1 ~]# systemctl start docker && systemctl enable docker
4.编辑配置文件
在本地编辑配置文件,用于挂载至容器中
[root@learn-1 ~]# mkdir -p /data/dashy [root@learn-1 ~]# vim /data/dashy/my-conf.yml --- # Page meta info, like heading, footer text and nav links pageInfo: title: Dashy description: Welcome to your new dashboard! navLinks: - title: GitHub path: https://github.com/Lissy93/dashy - title: Documentation path: https://dashy.to/docs # Optional app settings and configuration appConfig: # 设置默认主题 theme: colorful # 开启网站健康检查 statusCheck: true # Main content - An array of sections, each containing an array of items sections: - name: Getting Started icon: fas fa-rocket items: - title: Dashy Live description: Development a project management links for Dashy icon: https://i.ibb.co/qWWpD0v/astro-dab-128.png url: https://live.dashy.to/ target: newtab - title: GitHub description: Source Code, Issues and Pull Requests url: https://github.com/lissy93/dashy icon: favicon - title: Docs description: Configuring & Usage Documentation provider: Dashy.to icon: far fa-book url: https://dashy.to/docs - title: Showcase description: See how others are using Dashy url: https://github.com/Lissy93/dashy/blob/master/docs/showcase.md icon: far fa-grin-hearts - title: Config Guide description: See full list of configuration options url: https://github.com/Lissy93/dashy/blob/master/docs/configuring.md icon: fas fa-wrench - title: Support description: Get help with Dashy, raise a bug, or get in contact url: https://github.com/Lissy93/dashy/blob/master/.github/SUPPORT.md icon: far fa-hands-helping - name: test1 #statusCheck: true icon: fas fa-rocket items: - title: baidu url: http://www.baidu.com target: newtab icon: fa fa-sign-in - name: test2 #statusCheck: true icon: fas fa-rocket items: - title: google url: https://www.google.com target: newtab icon: fa fa-sign-in
5.启动Dashy容器
docker run -d -p 7777:80 -v /data/dashy/my-conf.yml:/app/public/conf.yml --name my-dashboard --restart=always lissy93/dashy:latest
6.启动Kecloak
docker run -d -p 7778:8080 --name auth-server -e KEYCLOAK_USER=admin -e KEYCLOAK_PASSWORD=admin quay.io/keycloak/keycloak:15.0.2
Web访问:http://192.168.0.136:7778,用户名/密码:admin/admin
7.对接Dashy
7.1 设置Kecloak
Keycloak 使用领域(类似于租户)来创建隔离的用户组。必须先创建一个领域,然后才能添加第一个用户 登陆控制台:http://192.168.0.136:7778,用户名/密码:admin/admin
创建一个realm,名称自定义,如:demo
创建用户
首次登陆强制修改密码
为用户设置密码
创建client
Client ID 自定义,如:demo Client Protocol 选择:openid-connect Root URL : http://192.168.0.136:7777 —dashy dashboard url
只保留以下配置,其余url删除: Valid Redirect URIs 重定向url,即认证过后跳转的url Web Origins 跳转地址
7.2 在 Dashy 配置文件中启用 Kecloak
vim /data/dashy/my-conf.yml ··· appConfig: auth: enableKeycloak: true keycloak: serverUrl: http://192.168.0.136:7778 realm: Demo clientId: demo # Keycloak V 17 或更早版本需要配置legacySupport: true legacySupport: true ... # 重启dashy docker restart my-dashboard
7.3 登录验证
登陆dashy dashboard http://192.168.0.136:7777
首次登陆强制修改密码