frieder.hannenheim/fruitbasket
1
0
Fork 0
forked from wurzel/fruitbasket
Code Pull requests Activity

add basic keycloak config

Browse source
This commit is contained in:
revol-xut 2022-08-16 15:18:28 +02:00
parent bea16d0652
commit 6525c45ca2
No known key found for this signature in database
GPG key ID: 4F56FF7759627D07
4 changed files with 121 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

34
modules/keycloak.nix Normal file
View file

@ -0,0 +1,34 @@
{pkgs, conifg, lib}: {
sops.secrets.postgres_keycloak.owner = config.systemd.services.keycloak.serviceConfig.User;
services = {
keycloak = {
enable = true;
settings = {
hostname = "keycloak.durian.tassilo-tanneberger.de";
};
database = {
username = "keycloak";
type = "postgresql";
passwordFile = ;
name = "keycloak";
host = "localhost";
};
};
postgresql = {
enable = true;
ensureUsers = [
{
name = "keycloak";
ensurePermissions = {
"DATABASE keycloak" = "ALL PRIVILEGES";
};
}
];
ensureDatabases = [ "keycloak" ];
};
};
}