Allow inkscape.org to authenticate other services through OpenID OAuth2
This may be a separate django on cloudscale.ch deployed via Ansible, that would then be used for all of our services:
- website
- mailman mailing list
- Wiki (in transition)
- Rocket.chat chat.inkscape.org
- GitLab?
- weblate?
- ?
Tasks:
-
Examine existing oauth microservices available, and identify best option(s) to test -
Test available option(s) -
Create Ansible code to install onto cloudscale nodes -
Test deployment on a staging node -
Document management of the service -
How to run the playbook to (re-)install -
What needs to be backed up -
Steps to restore from backup -
How to add/setup a new service
-
-
Deploy to production -
Create issues as needed for migrating each existing service to use this
Edited by Bryce Harrington