feat: 🔒 add keycloak password policy

cloud-pi-native · Oct 25, 2023 · 1aa6652 · 1aa6652
1 parent 78c8096
commit 1aa6652
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/roles/keycloak/tasks/main.yml b/roles/keycloak/tasks/main.yml
@@ -157,6 +157,7 @@
     id: dso
     realm: dso
     display_name: Dso Realm
+    password_policy: "length(8) and lowerCase(1) and upperCase(1) and specialChars(1) and digits(1) and passwordHistory(1) and notUsername() and forceExpiredPasswordChange(365)"
     enabled: true
 
 - name: Get keycloak dso realm users from API