[Draft] Basic LDAP/Portunus config #12

Merged
hxlcyxn merged 16 commits from ldap into main 2022-12-17 20:54:56 +01:00
Showing only changes of commit 2f8d5b8949 - Show all commits

View file

@ -1,9 +1,9 @@
tanneberger commented 2022-12-17 19:41:28 +01:00 (Migrated from github.com)
Review

potential security risk

potential security risk
tanneberger commented 2022-12-17 19:41:48 +01:00 (Migrated from github.com)
Review

should be nix path

should be nix path
tanneberger commented 2022-12-17 19:41:28 +01:00 (Migrated from github.com)
Review

potential security risk

potential security risk
tanneberger commented 2022-12-17 19:41:48 +01:00 (Migrated from github.com)
Review

should be nix path

should be nix path
{ config, ... }: { config, ... }:
let let
# temporary url, zum testen auf laptop zuhause # temporary url, zum testen auf laptop zuhause
tld = "moe"; tld = "de";
tanneberger commented 2022-12-17 19:41:28 +01:00 (Migrated from github.com)
Review

potential security risk

potential security risk
tanneberger commented 2022-12-17 19:41:48 +01:00 (Migrated from github.com)
Review

should be nix path

should be nix path
tanneberger commented 2022-12-17 19:41:28 +01:00 (Migrated from github.com)
Review

potential security risk

potential security risk
tanneberger commented 2022-12-17 19:41:48 +01:00 (Migrated from github.com)
Review

should be nix path

should be nix path
hostname = "eisvogel"; hostname = "ifsr";
tanneberger commented 2022-12-17 19:41:28 +01:00 (Migrated from github.com)
Review

potential security risk

potential security risk
tanneberger commented 2022-12-17 19:41:48 +01:00 (Migrated from github.com)
Review

should be nix path

should be nix path
tanneberger commented 2022-12-17 19:41:28 +01:00 (Migrated from github.com)
Review

potential security risk

potential security risk
tanneberger commented 2022-12-17 19:41:48 +01:00 (Migrated from github.com)
Review

should be nix path

should be nix path
domain = "portunus.${hostname}.${tld}"; domain = "auth.staging.${hostname}.${tld}";
tanneberger commented 2022-12-17 19:41:28 +01:00 (Migrated from github.com)
Review

potential security risk

potential security risk
tanneberger commented 2022-12-17 19:41:48 +01:00 (Migrated from github.com)
Review

should be nix path

should be nix path
tanneberger commented 2022-12-17 19:41:28 +01:00 (Migrated from github.com)
Review

potential security risk

potential security risk
tanneberger commented 2022-12-17 19:41:48 +01:00 (Migrated from github.com)
Review

should be nix path

should be nix path
portunusUser = "portunus"; portunusUser = "portunus";
portunusGroup = "portunus"; portunusGroup = "portunus";
@ -53,13 +53,6 @@ in
tanneberger commented 2022-12-17 19:41:28 +01:00 (Migrated from github.com)
Review

potential security risk

potential security risk
tanneberger commented 2022-12-17 19:41:48 +01:00 (Migrated from github.com)
Review

should be nix path

should be nix path
tanneberger commented 2022-12-17 19:41:28 +01:00 (Migrated from github.com)
Review

potential security risk

potential security risk
tanneberger commented 2022-12-17 19:41:48 +01:00 (Migrated from github.com)
Review

should be nix path

should be nix path
seedPath = "../config/portunus_seeds.json"; seedPath = "../config/portunus_seeds.json";
}; };
users.ldap = {
tanneberger commented 2022-12-17 19:41:28 +01:00 (Migrated from github.com)
Review

potential security risk

potential security risk
tanneberger commented 2022-12-17 19:41:48 +01:00 (Migrated from github.com)
Review

should be nix path

should be nix path
enable = true;
tanneberger commented 2022-12-17 19:41:28 +01:00 (Migrated from github.com)
Review

potential security risk

potential security risk
tanneberger commented 2022-12-17 19:41:48 +01:00 (Migrated from github.com)
Review

should be nix path

should be nix path
server = "ldaps://${domain}";
tanneberger commented 2022-12-17 19:41:28 +01:00 (Migrated from github.com)
Review

potential security risk

potential security risk
tanneberger commented 2022-12-17 19:41:48 +01:00 (Migrated from github.com)
Review

should be nix path

should be nix path
base = "dc=${hostname},dc=${tld}";
tanneberger commented 2022-12-17 19:41:28 +01:00 (Migrated from github.com)
Review

potential security risk

potential security risk
tanneberger commented 2022-12-17 19:41:48 +01:00 (Migrated from github.com)
Review

should be nix path

should be nix path
# useTLS = true; # nicht nötig weil ldaps domain festgelegt. würde sonst starttls auf port 389 versuchen
tanneberger commented 2022-12-17 19:41:28 +01:00 (Migrated from github.com)
Review

potential security risk

potential security risk
tanneberger commented 2022-12-17 19:41:48 +01:00 (Migrated from github.com)
Review

should be nix path

should be nix path
};
tanneberger commented 2022-12-17 19:41:28 +01:00 (Migrated from github.com)
Review

potential security risk

potential security risk
tanneberger commented 2022-12-17 19:41:48 +01:00 (Migrated from github.com)
Review

should be nix path

should be nix path
tanneberger commented 2022-12-17 19:41:28 +01:00 (Migrated from github.com)
Review

potential security risk

potential security risk
tanneberger commented 2022-12-17 19:41:48 +01:00 (Migrated from github.com)
Review

should be nix path

should be nix path
services.nginx = { services.nginx = {
enable = true; enable = true;
virtualHosts."${config.services.portunus.domain}" = { virtualHosts."${config.services.portunus.domain}" = {

tanneberger commented 2022-12-17 19:41:28 +01:00 (Migrated from github.com)
Review

potential security risk

potential security risk
tanneberger commented 2022-12-17 19:41:48 +01:00 (Migrated from github.com)
Review

should be nix path

should be nix path
tanneberger commented 2022-12-17 19:41:28 +01:00 (Migrated from github.com)
Review

potential security risk

potential security risk
tanneberger commented 2022-12-17 19:41:48 +01:00 (Migrated from github.com)
Review

should be nix path

should be nix path