Skip to content

Allow specifying a redis URL directly#4036

Closed
nogweii wants to merge 1 commit intogoauthentik:mainfrom
nogweii:patch-1
Closed

Allow specifying a redis URL directly#4036
nogweii wants to merge 1 commit intogoauthentik:mainfrom
nogweii:patch-1

Conversation

@nogweii
Copy link

@nogweii nogweii commented Nov 19, 2022

Details

  • Does this resolve an issue?
    I ran into this when trying to set up Authentik in my homelab. Specifically, I'm making a dedicated tiny computer run some security-sensitive software (Authentik, Vault, step-ca) and I'm hoping to minimize the number of listening TCP sockets.

Changes

New Features

  • Support overriding the generated cache location with a provided URL

Additional

This is meant for a couple of more advanced use cases:

  • Allows specifying a UNIX socket path to Redis
  • Can use a specific user name (rather than the default user) allowing for more granular ACLs in Redis 6+

As a side effect, any future keyword arguments to redis-py can be passed in immediately before there are specific environment variables for each of them.

Signed-off-by: No GUI 14547+nogweii@users.noreply.github.com

This allows an admin to specify a custom redis URL overriding the dynamically built one. This is meant for a couple of more advanced use cases:

* Allows specifying a UNIX socket path to Redis
* Can use a specific user name (rather than the `default` user) allowing for more granular ACLs in Redis 6+

As a side effect, any future keyword arguments to `redis-py` can be passed in immediately before there are specific environment variables for each of them.

Signed-off-by: No GUI <14547+nogweii@users.noreply.github.com>
@nogweii
Copy link
Author

nogweii commented Dec 4, 2022

friendly ping @BeryJu 😄

@BeryJu
Copy link
Member

BeryJu commented Dec 27, 2022

This can be done via custom python settings (see https://goauthentik.io/docs/installation/configuration#custom-python-settings)

@BeryJu BeryJu closed this Dec 27, 2022
@js6pak
Copy link

js6pak commented Jan 1, 2023

Using redis via an unix socket is not an advanced use case and it should be possible to do so by default

@98h398hrpohpoai
Copy link

98h398hrpohpoai commented Mar 25, 2023

Why was this closed? js6pak is correct.
Attempting to do this through custom python settings is problematic as it seems to ignore redis changes despite user_settings.py loading properly within the container, and the dump file doesn't process custom settings to debug per here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants