rouven.seifert/nixos-config
1
1
Fork 0
mirror of https://git.sr.ht/~rouven/nixos-config synced 2025-01-18 17:11:39 +01:00
Code Issues Projects Releases Packages Wiki Activity

keycloak: disable

Browse source
This commit is contained in:
Rouven Seifert 2024-03-09 15:23:50 +01:00
parent 103c238e3e
commit 7a3f987b0d
Signed by: rouven.seifert
GPG key ID: B95E8FE6B11C4D09
5 changed files with 3 additions and 49 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
hosts/falkenstein/modules/dns/default.nix
View file

@ -13,8 +13,9 @@
''; '';
file = pkgs.writeText "rfive.de_zone.txt" '' file = pkgs.writeText "rfive.de_zone.txt" ''
$TTL 3600 $TTL 3600
$ORIGIN rfive.de.
rfive.de. 86400 IN SOA ns.rfive.de. hostmaster.rfive.de. 2024030829 10800 3600 604800 3600 rfive.de. 86400 IN SOA ns.rfive.de. hostmaster.rfive.de. 2024030832 10800 3600 604800 3600
@ 3600 IN NS ns.rfive.de. @ 3600 IN NS ns.rfive.de.
@ 3600 IN NS ns.inwx.de. @ 3600 IN NS ns.inwx.de.
@ 3600 IN NS ns2.inwx.de. @ 3600 IN NS ns2.inwx.de.
@ -28,7 +29,7 @@
@ IN CAA 0 issue "letsencrypt.org" @ IN CAA 0 issue "letsencrypt.org"
@ IN CAA 0 issuewild ";" @ IN CAA 0 issuewild ";"
nuc 3600 IN A 141.30.227.6 nuc IN A 141.30.227.6
falkenstein IN A 23.88.121.184 falkenstein IN A 23.88.121.184
falkenstein IN AAAA 2a01:4f8:c012:49de::1 falkenstein IN AAAA 2a01:4f8:c012:49de::1
@ -45,7 +46,6 @@
rspamd._domainkey IN TXT "v=DKIM1; k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDoirUMubro4nlmY6a8JMwK9QB2agAXiJzexDU/7ba6KCggONfoSTfUHlrM/XeM1GG/9oKpngApxDPP97adJuxc8/EELyo4HjTyYD8GBFZhg0AN7V8IPaJ1o5k6dGDk8ZLh41ZCnlAVWkhVSKs5pYtzkrlJIfUSzyuoe8nuFsVe3QIDAQAB" rspamd._domainkey IN TXT "v=DKIM1; k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDoirUMubro4nlmY6a8JMwK9QB2agAXiJzexDU/7ba6KCggONfoSTfUHlrM/XeM1GG/9oKpngApxDPP97adJuxc8/EELyo4HjTyYD8GBFZhg0AN7V8IPaJ1o5k6dGDk8ZLh41ZCnlAVWkhVSKs5pYtzkrlJIfUSzyuoe8nuFsVe3QIDAQAB"
_dmarc IN TXT "v=DMARC1; p=none; adkim=s; fo=1; rua=mailto:dmarc@rfive.de; ruf=mailto:dmarc@rfive.de" _dmarc IN TXT "v=DMARC1; p=none; adkim=s; fo=1; rua=mailto:dmarc@rfive.de; ruf=mailto:dmarc@rfive.de"
auth IN CNAME nuc.rfive.de.
cache IN CNAME nuc.rfive.de. cache IN CNAME nuc.rfive.de.
chat IN CNAME nuc.rfive.de. chat IN CNAME nuc.rfive.de.
img.trucks IN CNAME falkenstein.rfive.de. img.trucks IN CNAME falkenstein.rfive.de.
@ -54,7 +54,6 @@
rspamd IN CNAME falkenstein.rfive.de. rspamd IN CNAME falkenstein.rfive.de.
seafile IN CNAME nuc.rfive.de. seafile IN CNAME nuc.rfive.de.
trucks IN CNAME falkenstein.rfive.de. trucks IN CNAME falkenstein.rfive.de.
uptime IN CNAME nuc.rfive.de.
vault IN CNAME nuc.rfive.de. vault IN CNAME nuc.rfive.de.
_discord IN TXT "dh=0bcca75b0a56c304f0c23fbdb3f12009411e8c0c" _discord IN TXT "dh=0bcca75b0a56c304f0c23fbdb3f12009411e8c0c"

1
hosts/nuc/default.nix
View file

@ -7,7 +7,6 @@
./modules/networks ./modules/networks
./modules/backup ./modules/backup
./modules/cache ./modules/cache
./modules/keycloak
./modules/matrix ./modules/matrix
./modules/mautrix-telegram ./modules/mautrix-telegram
./modules/seafile ./modules/seafile

43
hosts/nuc/modules/keycloak/default.nix
View file

@ -1,43 +0,0 @@
{ config, ... }:
let
domain = "auth.${config.networking.domain}";
in
{
age.secrets.keycloak = {
file = ../../../../secrets/nuc/keycloak/db.age;
};
services.keycloak = {
enable = true;
settings = {
http-port = 8084;
https-port = 19000;
hostname = domain;
# proxy-headers = "forwarded";
proxy = "edge";
};
database = {
# host = "/var/run/postgresql/.s.PGSQL.5432";
# useSSL = false;
# createLocally = false;
passwordFile = config.age.secrets.keycloak.path;
};
initialAdminPassword = "plschangeme";
};
# services.postgresql = {
# enable = true;
# ensureUsers = [
# {
# name = "keycloak";
# ensureDBOwnership = true;
# }
# ];
# ensureDatabases = [ "keycloak" ];
# };
services.nginx.virtualHosts."${domain}" = {
enableACME = true;
forceSSL = true;
locations."/" = {
proxyPass = "http://127.0.0.1:${toString config.services.keycloak.settings.http-port}";
};
};
}

1
secrets.nix
View file

@ -20,7 +20,6 @@ in
"secrets/nuc/matrix/sync.age".publicKeys = [ rouven nuc ]; "secrets/nuc/matrix/sync.age".publicKeys = [ rouven nuc ];
"secrets/nuc/mautrix-telegram/env.age".publicKeys = [ rouven nuc ]; "secrets/nuc/mautrix-telegram/env.age".publicKeys = [ rouven nuc ];
"secrets/nuc/vaultwarden.age".publicKeys = [ rouven nuc ]; "secrets/nuc/vaultwarden.age".publicKeys = [ rouven nuc ];
"secrets/nuc/keycloak/db.age".publicKeys = [ rouven nuc ];
"secrets/nuc/cache.age".publicKeys = [ rouven nuc ]; "secrets/nuc/cache.age".publicKeys = [ rouven nuc ];
"secrets/nuc/borg/passphrase.age".publicKeys = [ rouven nuc ]; "secrets/nuc/borg/passphrase.age".publicKeys = [ rouven nuc ];
"secrets/nuc/borg/key.age".publicKeys = [ rouven nuc ]; "secrets/nuc/borg/key.age".publicKeys = [ rouven nuc ];

BIN
secrets/nuc/keycloak/db.age
View file

Binary file not shown.