Sign inSign up

peekaboo51490/rozgaar.ai-identity-service

By peekaboo51490

β€’Updated 8 months ago

Identity Service for rozgaar.ai

Image
API management
0

2.4K

peekaboo51490/rozgaar.ai-identity-service repository overview

⁠rozgaar.ai Identity Service

Docker Pulls Docker Image Size

Enterprise-grade Identity & Authentication Service built for cloud-native, Kubernetes-first environments.

Designed as a core building block for distributed systems that need secure authentication, authorization, and observability out of the box.


β πŸš€ Features

  • OAuth2 / OpenID Connect (OIDC)
  • JWT-based authentication (access & refresh tokens)
  • Role-based access control (RBAC)
  • PostgreSQL-backed persistence
  • Kubernetes & microservice friendly
  • Prometheus metrics & health probes
  • Production-ready defaults (no dev shortcuts)

⁠🐳 Docker Images

Repository


peekaboo51490/rozgaar.ai-identity-service

⁠Available Tags
TagDescription
latestLatest stable release
vX.Y.ZImmutable, pinned production versions

βœ… Always prefer versioned tags (vX.Y.Z) in production to enable safe rollbacks.


⁠πŸ“₯ Pull the Image

docker pull peekaboo51490/rozgaar.ai-identity-service:latest

Or a pinned version:

docker pull peekaboo51490/rozgaar.ai-identity-service:v1.0.0

⁠▢️ Run Locally (Example)

docker run -d \
  --name rozgaar-identity-service \
  -p 8080:8080 \
  -e SPRING_PROFILES_ACTIVE=prod \
  -e DB_URL=jdbc:postgresql://host.docker.internal:5432/rozgaar_identity \
  -e DB_USERNAME=postgres \
  -e DB_PASSWORD=postgres \
  -e JWT_SECRET=super-secret-key \
  -e JWT_ACCESS_TOKEN_EXP_MINUTES=15 \
  -e JWT_REFRESH_TOKEN_EXP_DAYS=7 \
  -e NOTIFICATION_SERVICE_BASE_URL=http://localhost:8081 \
  peekaboo51490/rozgaar.ai-identity-service:latest

β βš™οΈ Configuration
VariableRequiredDefaultDescription
SPRING_PROFILES_ACTIVEYesβ€”Active Spring profile
SERVER_PORTNo8080Application port
DB_URLYesβ€”PostgreSQL JDBC URL
DB_USERNAMEYesβ€”Database username
DB_PASSWORDYesβ€”Database password
JWT_SECRETYesβ€”JWT signing secret
JWT_ACCESS_TOKEN_EXP_MINUTESYesβ€”Access token expiry (minutes)
JWT_REFRESH_TOKEN_EXP_DAYSYesβ€”Refresh token expiry (days)
NOTIFICATION_SERVICE_BASE_URLYesβ€”Notification service base URL

Timeouts & retries are preconfigured for production reliability.


β πŸ“Š Observability & Monitoring
  • Health checks: /api/actuator/health
  • Prometheus metrics: /api/actuator/prometheus
  • Metrics server port: 10103

Prometheus:

  • Exemplars disabled
  • Tracing sampling: 100%

β πŸ›‘οΈ Mandatory Headers

Certain routes enforce mandatory headers for security.

Skipped routes:

/api/actuator
/api/actuator/**

⁠☸️ Kubernetes & Production Usage

  • Designed to run behind an API Gateway / Ingress
  • Works with horizontal scaling
  • Compatible with Helm-based deployments
  • Safe to use with immutable image tags

β πŸ“¦ Versioning Strategy

  • Semantic Versioning (vMAJOR.MINOR.PATCH)
  • Versions are automatically generated from commit messages
  • Each release is immutable
  • Rollbacks are as simple as pulling a previous tag

Tag summary

Content type

Image

Digest

sha256:e31ccc3ec…

Size

150.7 MB

Last updated

8 months ago

docker pull peekaboo51490/rozgaar.ai-identity-service