kiterun/incus-fga
1
0
Fork 0
Code Issues Pull Requests Releases Activity

chown

Browse Source
This commit is contained in:
Brandon Kalinowski 2024-10-28 15:28:07 +00:00
parent 516475d47a
commit 6ac41d45a7
2 changed files with 10 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
openfga-end.sh
View File

@ -2,7 +2,6 @@
# Source: https://raw.githubusercontent.com/rgl/incus-playground/349480b30d82ca1b468cb6e983988c7cb01343e3/provision-openfga.sh # Source: https://raw.githubusercontent.com/rgl/incus-playground/349480b30d82ca1b468cb6e983988c7cb01343e3/provision-openfga.sh
set -euxo pipefail set -euxo pipefail
POSTGRES_FQDN="localhost"
OPENFGA_FQDN="localhost" OPENFGA_FQDN="localhost"
# configure. # configure.
@ -14,8 +13,8 @@ log:
format: text format: text
level: info # none, debug, info, warn, error, panic, fatal. level: info # none, debug, info, warn, error, panic, fatal.
datastore: datastore:
engine: postgres engine: sqlite
uri: postgres://openfga:abracadabra@$POSTGRES_FQDN:5432/openfga uri: file:/opt/openfga/openfga.db
authn: authn:
method: preshared method: preshared
preshared: preshared:
@ -28,12 +27,12 @@ grpc:
enabled: false enabled: false
http: http:
enabled: true enabled: true
addr: :8080 addr: 127.0.0.1:8080
tls: tls:
enabled: false enabled: false
metrics: metrics:
enabled: true enabled: true
addr: :2112 addr: 127.0.0.1:2112
playground: playground:
enabled: false enabled: false
port: 3000 port: 3000

15
provision-openfga.sh
View File

@ -28,19 +28,14 @@ install -d "$t/dist"
tar xf "$t/openfga.tgz" -C "$t/dist" tar xf "$t/openfga.tgz" -C "$t/dist"
rm -rf /opt/openfga rm -rf /opt/openfga
mv "$t/dist" /opt/openfga mv "$t/dist" /opt/openfga
chown -R root:root /opt/openfga touch /opt/openfga/openfga.db
chown -R openfga:openfga /opt/openfga
rm -rf "$t" rm -rf "$t"
# create the openfga role and database. # create the openfga role and database.
pushd /
sudo -sHu postgres psql -c "create role openfga login password 'abracadabra'"
sudo -sHu postgres createdb -E UTF8 -O openfga openfga >/dev/null
/opt/openfga/openfga migrate \ /opt/openfga/openfga migrate \
--datastore-engine postgres \ --datastore-engine sqlite \
--datastore-uri "postgres://openfga:abracadabra@$POSTGRES_FQDN:5432/openfga" --datastore-uri file:/opt/openfga/openfga.db
sudo -sHu postgres psql -c '\du'
sudo -sHu postgres psql -l
popd
# configure. # configure.
# see https://openfga.dev/docs/getting-started/setup-openfga/configure-openfga # see https://openfga.dev/docs/getting-started/setup-openfga/configure-openfga
@ -76,6 +71,8 @@ playground:
port: 3000 port: 3000
EOF EOF
chown -R openfga:openfga /opt/openfga
# brandonkal: disable TLS # brandonkal: disable TLS
#install -o root -g openfga -m 444 "/vagrant/shared/example-ca/$OPENFGA_FQDN-crt.pem" /opt/openfga #install -o root -g openfga -m 444 "/vagrant/shared/example-ca/$OPENFGA_FQDN-crt.pem" /opt/openfga
#install -o root -g openfga -m 440 "/vagrant/shared/example-ca/$OPENFGA_FQDN-key.pem" /opt/openfga #install -o root -g openfga -m 440 "/vagrant/shared/example-ca/$OPENFGA_FQDN-key.pem" /opt/openfga