The liquid-core
app serves as the central user database in the bundle.
It's a Django app with the django-oauth-toolkit
plugin installed,
which acts as an OAuth2 provider. The users are stored as plain Django
users, and they can be managed via Django's admin pages.
Optionally, TOTP-based two factor authentication may be enabled by setting
the environment variable LIQUID_2FA=true
. TOTP works with phone apps like
Google Authenticator and Duo Mobile.
The app is configured by setting environment variables.
DEBUG
: set totrue
to enable debugging.SECRET_KEY
: a random secret string.LIQUID_PROTO
:http
(default) orhttps
.LIQUID_DOMAIN
: the domain name, e.g.liquid.example.com
.SERVICE_ADDRESS
: name or address of the internal service, as it'sLIQUID_2FA
: set totrue
to enable TOTP two-factor auth.