local_dev_remote_kratos.md

flux suspend source chart stackspin-single-sign-on
helm get values single-sign-on -n stackspin > /to/a/path/my_cluster_values.yaml
rm -rf charts
helm dep update
postgresql:
  initdbScripts:
    setup.sql: |
      CREATE USER hydra WITH PASSWORD 'hydra';
      CREATE USER kratos WITH PASSWORD 'kratos';
      CREATE USER stackspin WITH PASSWORD 'stackspin';
      CREATE DATABASE kratos WITH OWNER kratos;
      CREATE DATABASE hydra WITH OWNER hydra;
      CREATE DATABASE stackspin WITH OWNER stackspin;
kratos:
  kratos:
    config:
      dsn: postgres://kratos:ChangeThisPassword@single-sign-on-postgresql:5432/kratos

hydra:
  hydra:
    config:
      dsn: postgres://hydra:hydra@single-sign-on-postgresql:5432/hydra


kratos:
  kratos:
    config:
      courier:
        smtp:
         # Kratos enforces the use of STARTTLS. Be sure your SMTP provider
         # supports that (if not, it is time to swtich providers)
         connection_uri: smtp://stackspin@example.com:MyPassword@smtp.greenhost.nl:25/
         from_address: no-reply@example.com

      # For development, we forward all to our local server (or your dev server
      # if that is remote)
      serve:
        public:
          base_url: http://localhost/api/

      selfservice:
        default_browser_return_url: http://localhost/login/login

        flows:
          recovery:
            ui_url: http://localhost/login/recovery

          login:
            ui_url: http://localhost/login/login

          settings:
            ui_url: http://localhost/login/settings

          registration:
            ui_url: http://localhost/login/registration


hydra:
  hydra:
    config:
      urls:
        # For development we redirect to localhost (or your dev server)
        login: http://localhost/login/auth
        consent: http://localhost/login/consent
        logout: http://localhost/login/logout


cd helmchart/single-sign-on
helm upgrade -f /to/a/path/my_cluster_values.yaml single-sign-on . -n stackspin --debug
./set-ssh-tunnel.sh `stackspin.example.com`

server {
    listen 80 default_server;
    listen [::]:80 default_server;

    root /var/www/html;

    # Add index.php to the list if you are using PHP
    index index.html index.htm index.nginx-debian.html;

    server_name _;

    location / {
        # First attempt to serve request as file, then
        # as directory, then fall back to displaying a 404.
        try_files $uri $uri/ =404;
    }

    # Flask app
    location /login/ {
        proxy_pass http://127.0.0.1:5000/;
        proxy_redirect     default;
        proxy_set_header   X-Forwarded-For   $proxy_add_x_forwarded_for;
    }

    # Kratos Public
    location /api/  {
        proxy_pass http://127.0.0.1:8080/;
        proxy_redirect     default;
        proxy_set_header   X-Forwarded-For   $proxy_add_x_forwarded_for;
    }
}
sudo systemctl reload nginx.service
cd projectroot/login
sudo apt-get install python3-flask python3-pip
pip3 install -r requirements.txt
cat source_env

export FLASK_RUN_HOST=0.0.0.0
export FLASK_RUN_PORT=5000
export HYDRA_ADMIN_URL=http://localhost:4445
export KRATOS_PUBLIC_URL=http://localhost/api
export KRATOS_ADMIN_URL=http://localhost:8000
export PUBLIC_URL=http://localhost/login

export DATABASE_URL="postgresql://stackspin:stackspin@localhost/stackspin"
export APP_SETTINGS="config.DevelopmentConfig"
. source_env
flask db upgrade
flask user add myemail@example.com
./run.sh