frieder.hannenheim/fruitbasket
1
0
Fork 0
forked from wurzel/fruitbasket
Code Pull requests Activity

nixify portunus seeds

Browse source
This commit is contained in:
Lyn Fugmann 2023-07-07 17:13:17 +02:00
parent e8263b93dc
commit da7cbfb98c
Signed by untrusted user: fugi
GPG key ID: 4472A20091BFA792
2 changed files with 41 additions and 55 deletions
Download patch file Download diff file Expand all files Collapse all files

42
modules/ldap/default.nix
View file

@ -1,6 +1,46 @@
{ config, lib, pkgs, ... }:
let
domain = "auth.${config.fsr.domain}";
seed = {
groups = [
{
name = "admins";
long_name = "Portunus Admin";
members = [ "admin" ];
permissions.portunus.is_admin = true;
}
{
name = "search";
long_name = "LDAP search group";
members = [ "search" ];
permissions.ldap.can_read = true;
}
{
name = "fsr";
long_name = "Mitglieder des iFSR";
}
];
users = [
{
login_name = "admin";
given_name = "admin";
family_name = "admin";
password.from_command = [
"${pkgs.coreutils}/bin/cat"
config.sops.secrets."portunus/admin-password".path
];
}
{
login_name = "search";
given_name = "search";
family_name = "search";
password.from_command = [
"${pkgs.coreutils}/bin/cat"
config.sops.secrets."portunus/search-password".path
];
}
];
};
in
{
sops.secrets = {
@ -22,7 +62,7 @@ in
inherit domain;
port = 8681;
dex.enable = true;
seedPath = ../config/portunus_seeds.json;
seedPath = pkgs.writeText "portunus-seed.json" (builtins.toJSON seed);
ldap = {
suffix = "dc=ifsr,dc=de";