mini-node/config.yaml at main · EUCAIM/mini-node · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
host_path: "/home/ubuntu/minikube-data/"
  # The path in the host that it is shared to the node services

public_domain: "mininode.imaging.i3m.upv.es"
  # The public domain where the node will be accessible

postgres:
  db_password: "yourdbpassword"
  username: "yourusername"
  database: "yourdatabase"

use_gateway_api: false

tracer:
  url: ""

keycloak:
  admin_username: "admin"
    # The name of the admin user
  admin_password: "supersecret_admin"
    # The password to access the admin console of users management
  db_password: "supersecret_db"
    # The password for the keycloak database user
  admin_emails: "admin@example.com,admin2@example.com"
    # Comma-separated list of admin emails to notify new user registrations
  idp_lsri:
    enabled: "false"
    client_id: "xxxxxxxxx"
    client_secret: "xxxxxxxxx"

# Optional: Platform administrator user (cluster admin)
platform_admin_user:
  username: "platform-admin"
  email: "platform-admin@example.com"
  password: "supersecret_platform_admin"
    # This user will have administrative access to the entire platform

oidc:
  authorization_endpoint: "https://[]/auth/realms/EUCAIM-NODE/protocol/openid-connect/auth"
  jwks_endpoint: "https://[]/auth/realms/EUCAIM-NODE/protocol/openid-connect/certs"
  issuer: "https://[]/auth/realms/EUCAIM-NODE"
  clientID: "guacamole"
  redirect_uri: "https://[]/guacamole/"
  username_claim_type: "preferred_username"
  groups_claim_type: "groups"

orthanc:
  patient_id_encryption_key: ""
  admin_username: ""
  admin_password: ""

letsencrypt:
  email: "admin@i3m.upv.es"
  use_staging: false

guacamole:
  hostname: "postgresql"
  port: "5432"
  username: "guacamole"
  password: "password"
  database: "guacamole"
  adminPassword: "xxxxxxxxx"

focus:
  provider: "YOUR_PROV"
    # Short provider identifier, e.g. 'upv' — used in beam app IDs
  focus_api_key: "changeme"
    # API key for the focus application (from beam broker registration)
  dataset_service_auth_header: "Basic changeme"
    # Authorization header value for dataset-service API calls (Base64 encoded credentials)
  beam_broker_url: "https://broker.eucaim.cancerimage.eu"
    # URL of the EUCAIM beam broker
  root_crt_pem: |
    -----BEGIN CERTIFICATE-----
    REPLACE_WITH_BROKER_ROOT_CA_PEM
    -----END CERTIFICATE-----
    # PEM-encoded root CA certificate of the beam broker (for TLS verification)
  proxy_private_key_pem: |
    -----BEGIN PRIVATE KEY-----
    REPLACE_WITH_PROXY_PRIVATE_KEY_PEM
    -----END PRIVATE KEY-----
    # PEM-encoded private key of this node's beam proxy certificate (not base64, raw PEM)