diff --git a/flake.nix b/flake.nix index d13aa7b..faf38af 100755 --- a/flake.nix +++ b/flake.nix @@ -78,6 +78,7 @@ ./modules/ese-website.nix ./modules/ldap + ./modules/sssd.nix ./modules/mail ./modules/mailman.nix ./modules/mysql.nix diff --git a/modules/ldap/default.nix b/modules/ldap/default.nix index e16fe57..5c276c1 100644 --- a/modules/ldap/default.nix +++ b/modules/ldap/default.nix @@ -47,10 +47,6 @@ in "portunus/admin-password".owner = config.services.portunus.user; "portunus/search-password".owner = config.services.portunus.user; "dex/environment".owner = config.systemd.services.dex.serviceConfig.User; - nslcd_ldap_search = { - key = "portunus/search-password"; - owner = config.systemd.services.nslcd.serviceConfig.User; - }; }; services.portunus = { @@ -97,19 +93,6 @@ in isSystemUser = true; }; groups.dex = { }; - - ldap = - let portunus = config.services.portunus; in - rec { - enable = true; - server = "ldap://localhost"; - base = "${portunus.ldap.suffix}"; - bind = { - distinguishedName = "uid=${portunus.ldap.searchUserName},ou=users,${base}"; - passwordFile = config.sops.secrets.nslcd_ldap_search.path; - }; - daemon.enable = true; - }; }; security.pam.services.sshd.makeHomeDir = true;