directus oidc

.gitea/workflow/deploy.yml

@@ -0,0 +1,16 @@
+name: Deploy to CapRover
+on:
+  push:
+    branches: [ main ]
+
+jobs:
+  build-and-deploy:
+    runs-on: ubuntu-latest # ou o label do seu runner
+    steps:
+      - uses: actions/checkout@v3
+      - name: Deploy to CapRover
+        uses: caprover/deploy-from-github@v1.0.1
+        with:
+          server: ${{ secrets.CAPROVER_SERVER }}
+          app: 'meu-directus'
+          token: ${{ secrets.CAPROVER_APP_TOKEN }}

Dockerfile

@@ -0,0 +1,13 @@
+FROM directus/directus:11
+
+USER root
+RUN apk add --no-cache openssl
+
+USER node
+RUN npm install directus-extension-openid-connect-provider
+
+COPY --chown=node:node ./docker-entrypoint-oidc.sh /usr/local/bin/docker-entrypoint-oidc.sh
+RUN chmod +x /usr/local/bin/entrypoint-custom.sh
+
+ENTRYPOINT ["docker-entrypoint-oidc.sh"]
+CMD ["npx", "directus", "start"]

captain-definition

@@ -0,0 +1,4 @@
+{
+  "schemaVersion": 2,
+  "dockerfilePath": "./Dockerfile"
+}

docker-compose.yml

@@ -0,0 +1,18 @@
+services:
+  directus:
+    build: .
+    ports:
+      - "8055:8055"
+    environment:
+      KEY: "uma-chave-aleatoria"
+      SECRET: "um-segredo-aleatoria"
+      DB_CLIENT: "sqlite3"
+      DB_FILENAME: "/directus/database/data.db"
+      # Configurações da Extensão (Baseadas na doc da directus-extension-auth)
+      OIDC_ISSUER: "http://localhost:8055"
+      OIDC_PRIVATE_KEY_PATH: "/directus/oidc_private.key"
+      # Exemplo de Client para o Grist
+      OIDC_CLIENTS: '[{"id":"grist","secret":"secret-do-grist","redirect_uris":["http://localhost:8484/oauth2/callback"]}]'
+    volumes:
+      - ./database:/directus/database
+      - ./uploads:/directus/uploads

docker-entrypoint-oidc.sh

@@ -0,0 +1,10 @@
+#!/bin/sh
+
+# Se a variável de ambiente existir, cria o arquivo de chave
+if [ ! -z "$OIDC_PRIVATE_KEY" ]; then
+    echo "Injetando OIDC Private Key..."
+    echo "$OIDC_PRIVATE_KEY" > /directus/oidc_private.key
+fi
+
+# Executa o comando original (o CMD do Dockerfile)
+/usr/local/bin/docker-entrypoint.sh "$@"