entra auth test

This commit is contained in:
nmemmert committed 2025-11-06 15:45:59 -05:00
1 parent 5ed8131529
commit baee94bcf7
3 files changed
+126 -8

No files matched your search

+20 -3
View File
@@ -130,9 +130,9 @@ User=$CURRENT_USER
WorkingDirectory=/home/$CURRENT_USER/pdf-rename-sort
Environment="PATH=/home/$CURRENT_USER/pdf-rename-sort/venv/bin"
Environment="SECRET_KEY=CHANGE_THIS_SECRET_KEY_IN_PRODUCTION"
Environment="TENANT_ID=${TENANT_ID:-YOUR_MICROSOFT_ENTRA_TENANT_ID}"
Environment="CLIENT_ID=${CLIENT_ID:-YOUR_MICROSOFT_ENTRA_CLIENT_ID}"
Environment="CLIENT_SECRET=${CLIENT_SECRET:-YOUR_MICROSOFT_ENTRA_CLIENT_SECRET}"
$(if [ -n "$TENANT_ID" ] && [ "$TENANT_ID" != "YOUR_MICROSOFT_ENTRA_TENANT_ID" ]; then echo "Environment=\"TENANT_ID=$TENANT_ID\""; fi)
$(if [ -n "$CLIENT_ID" ] && [ "$CLIENT_ID" != "YOUR_MICROSOFT_ENTRA_CLIENT_ID" ]; then echo "Environment=\"CLIENT_ID=$CLIENT_ID\""; fi)
$(if [ -n "$CLIENT_SECRET" ] && [ "$CLIENT_SECRET" != "YOUR_MICROSOFT_ENTRA_CLIENT_SECRET" ]; then echo "Environment=\"CLIENT_SECRET=$CLIENT_SECRET\""; fi)
Environment="ADMIN_USERNAME=$ADMIN_USER"
Environment="ADMIN_PASSWORD=$ADMIN_PASS"
ExecStart=/home/$CURRENT_USER/pdf-rename-sort/venv/bin/gunicorn --bind 127.0.0.1:3000 pdf_renamer:app
@@ -249,6 +249,18 @@ echo "4. Add a client secret under Certificates & secrets"
echo "5. Add redirect URI: https://$DOMAIN_NAME/auth/microsoft/callback"
echo "6. Grant appropriate permissions if needed"
echo ""
echo "If you provided Entra credentials during installation:"
echo " - The service has been configured automatically"
echo " - Skip to step 6 below"
echo ""
echo "If you left Entra credentials blank during installation:"
echo " - Edit the service file: sudo nano /etc/systemd/system/pdf-renamer.service"
echo " - Add the following lines (replace with your actual values):"
echo " Environment=\"TENANT_ID=your-tenant-id\""
echo " Environment=\"CLIENT_ID=your-client-id\""
echo " Environment=\"CLIENT_SECRET=your-client-secret\""
echo " - Save and run: sudo systemctl daemon-reload && sudo systemctl restart pdf-renamer"
echo ""
echo "Next steps:"
echo "1. Update the environment variables in /etc/systemd/system/pdf-renamer.service:"
echo " - SECRET_KEY: Set a secure random key (use: openssl rand -hex 32)"
@@ -272,6 +284,11 @@ echo "5. Check service status:"
echo " sudo systemctl status pdf-renamer"
echo " sudo systemctl status nginx"
echo ""
echo "6. Test OAuth configuration:"
echo " cd /home/$CURRENT_USER/pdf-rename-sort"
echo " source venv/bin/activate"
echo " python test_oauth_config.py"
echo ""
echo "NOTE: This setup runs alongside your existing app on port 5000."
echo "The PDF Renamer will be accessible at https://$DOMAIN_NAME."
echo "File permissions have been set for web access (755 for directories)."