ctao/portal
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

vhost switch: Sveltia backend + Gitea ROOT_URL to https ingress domains, CORS locked to the portal origin

Browse Source
This commit is contained in:
ctao
2026-07-29 10:35:26 +02:00
parent a74eef0e47
commit 746b015e85
2 changed files with 12 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files
public/admin/config.yml
+6 -8
View File
@@ -1,15 +1,13 @@
# Sveltia CMS config — backend: Gitea on the Cyfronet machine (demo). Editors
# log in via Gitea OAuth (PKCE, no client secret); edits are committed to the
# ctao/portal repo. localhost:3000 works both on the machine and through the
# ssh -L tunnel (same port number keeps Gitea's ROOT_URL valid).
# TODO(vhost): switch base_url/api_root to the public Gitea URL once the
# ingress vhost exists (and update the OAuth app's redirect_uris + ROOT_URL).
# Sveltia CMS config — backend: Gitea behind the Cyfronet ingress (HTTPS
# vhost). Editors log in via Gitea OAuth (PKCE, no client secret); edits are
# committed to the ctao/portal repo. Gitea's ROOT_URL and CORS are pinned to
# these origins in deploy/ctao-demo-gitea.container.
backend:
name: gitea
repo: ctao/portal
branch: main
base_url: http://localhost:3000
api_root: http://localhost:3000/api/v1
base_url: https://astro-git.isl-dev.grid.cyfronet.pl
api_root: https://astro-git.isl-dev.grid.cyfronet.pl/api/v1
app_id: cf1c44ac-ebe6-4a97-bf2f-f7f26ef1126c
# OAuth only — hides the "access token" sign-in option (documented
# auth_methods). The "Work with Local Repository" button needs no config: