mirror of
https://github.com/Eugeny/tabby-web.git
synced 2026-08-16 22:36:02 +01:00
9544e363c9
Add support for AzureADTenantOAuth2 backend which allows restricting authentication to a specific Azure AD tenant (organization). Configuration: - SOCIAL_AUTH_AZUREAD_TENANT_OAUTH2_KEY: Azure app client ID - SOCIAL_AUTH_AZUREAD_TENANT_OAUTH2_SECRET: Azure app client secret - SOCIAL_AUTH_AZUREAD_TENANT_OAUTH2_TENANT_ID: Azure AD Directory ID This enables organizations to restrict Tabby Web access to only users from their Azure AD tenant, preventing personal Microsoft accounts or users from other organizations from logging in. Fixes #120
42 lines
1.5 KiB
YAML
42 lines
1.5 KiB
YAML
services:
|
|
tabby:
|
|
build: .
|
|
restart: always
|
|
depends_on:
|
|
- db
|
|
ports:
|
|
- 9090:80
|
|
environment:
|
|
- DATABASE_URL=mysql://root:123@db/tabby
|
|
- PORT=80
|
|
- DEBUG=False
|
|
- DOCKERIZE_ARGS="-wait tcp://db:3306 -timeout 60s"
|
|
#
|
|
# OAuth Providers - uncomment and configure:
|
|
# - SOCIAL_AUTH_GITHUB_KEY=your_github_client_id
|
|
# - SOCIAL_AUTH_GITHUB_SECRET=your_github_client_secret
|
|
# - SOCIAL_AUTH_GITLAB_KEY=your_gitlab_client_id
|
|
# - SOCIAL_AUTH_GITLAB_SECRET=your_gitlab_client_secret
|
|
# - SOCIAL_AUTH_GOOGLE_OAUTH2_KEY=your_google_client_id
|
|
# - SOCIAL_AUTH_GOOGLE_OAUTH2_SECRET=your_google_client_secret
|
|
#
|
|
# Microsoft/Azure AD (multi-tenant - allows any Microsoft account):
|
|
# - SOCIAL_AUTH_MICROSOFT_GRAPH_KEY=your_microsoft_client_id
|
|
# - SOCIAL_AUTH_MICROSOFT_GRAPH_SECRET=your_microsoft_client_secret
|
|
#
|
|
# Azure AD Single-Tenant (restricts to specific organization):
|
|
# - SOCIAL_AUTH_AZUREAD_TENANT_OAUTH2_KEY=your_azure_client_id
|
|
# - SOCIAL_AUTH_AZUREAD_TENANT_OAUTH2_SECRET=your_azure_client_secret
|
|
# - SOCIAL_AUTH_AZUREAD_TENANT_OAUTH2_TENANT_ID=your_tenant_id
|
|
#
|
|
# - APP_DIST_STORAGE="file:///app-dist"
|
|
|
|
db:
|
|
image: mariadb:10.7.1
|
|
restart: always
|
|
environment:
|
|
MARIADB_DATABASE: tabby
|
|
MARIADB_USER: user
|
|
MARIADB_PASSWORD: 123
|
|
MYSQL_ROOT_PASSWORD: 123
|