Omar Sobh
298eb8e20e
Two of the fleet's Gitea Actions runners (morpheus, architect) already had 8080 permanently bound by unrelated services (nginx on morpheus, envio-hasura on architect) — every e2e run scheduled there died at playwright's webServer preflight with "http://127.0.0.1:8080/healthz is already used". 18080 is unused across morpheus/tank/architect. Swap 8080 → 18080 in the eight e2e-scoped sites: clawmates.e2e.toml (listen_addr + slack base_url + oauth redirect_base), dex.yaml (client redirect URIs must match backend), playwright.config.ts + tests (p4-slack, p6-oauth), the http.ts dev-fallback origin, and the two shell scripts (e2e-backend safety check, rehearse-install healthz probe). Prod compose (/opt/clawmates/docker-compose.yml on gw-04) is untouched; prod continues to expose the server on 8080 internally on the compose network (that's per-network, not host-shared).
22 lines
603 B
YAML
22 lines
603 B
YAML
# Real OIDC IdP for the e2e OAuth browser-flow journey.
|
|
issuer: http://127.0.0.1:54556/dex
|
|
storage:
|
|
type: memory
|
|
web:
|
|
http: 0.0.0.0:5556
|
|
oauth2:
|
|
skipApprovalScreen: true
|
|
staticClients:
|
|
- id: clawmates
|
|
secret: tc-e2e-oauth-secret
|
|
name: Clawmates
|
|
redirectURIs:
|
|
- http://127.0.0.1:18080/api/apps/oauth/callback
|
|
enablePasswordDB: true
|
|
staticPasswords:
|
|
- email: [email protected]
|
|
# bcrypt("password") — dex's documented example hash.
|
|
hash: "$2a$10$2b2cU8CPhOTaGrs1HRQuAueS7JTT5ZHsHSzYiFPm1leZck7Mc8T4W"
|
|
username: admin
|
|
userID: 08a8684b-db88-4b73-90a9-3cd1661f5466
|