From e470b83cb6a2d1e5022568db183f30d0428f2daa Mon Sep 17 00:00:00 2001 From: Rouven Seifert Date: Sun, 1 Sep 2024 22:40:52 +0200 Subject: [PATCH] keycloak: remove dangling file --- modules/keycloak.nix | 34 ---------------------------------- 1 file changed, 34 deletions(-) delete mode 100644 modules/keycloak.nix diff --git a/modules/keycloak.nix b/modules/keycloak.nix deleted file mode 100644 index ccee386..0000000 --- a/modules/keycloak.nix +++ /dev/null @@ -1,34 +0,0 @@ -{ config, ... }: -let - domain = "sso.${config.networking.domain}"; -in -{ - sops.secrets."keycloak/db" = { }; - services.keycloak = { - enable = true; - # we use unstable as the release in stable is insecure - # package = nixpkgs-unstable.legacyPackages.x86_64-linux.keycloak; - settings = { - http-port = 8086; - https-port = 19000; - hostname = domain; - proxy = "edge"; - }; - # The module requires a password for the DB and works best with its own DB config - # Does an automatic Postgresql configuration - database = { - passwordFile = config.sops.secrets."keycloak/db".path; - }; - initialAdminPassword = "plschangeme"; - }; - services.nginx.virtualHosts."${domain}" = { - locations."/" = { - proxyPass = "http://127.0.0.1:${toString config.services.keycloak.settings.http-port}"; - extraConfig = '' - proxy_buffer_size 128k; - proxy_buffers 4 256k; - proxy_busy_buffers_size 256k; - ''; - }; - }; -}