[Draft] Basic LDAP/Portunus config #12

Merged
hxlcyxn merged 16 commits from ldap into main 2022-12-17 20:54:56 +01:00
Showing only changes of commit db63f4eb8d - Show all commits

View file

@ -1,4 +1,5 @@
tanneberger commented 2022-12-17 19:41:28 +01:00 (Migrated from github.com)
Review

potential security risk

potential security risk
tanneberger commented 2022-12-17 19:41:48 +01:00 (Migrated from github.com)
Review

should be nix path

should be nix path
tanneberger commented 2022-12-17 19:41:28 +01:00 (Migrated from github.com)
Review

potential security risk

potential security risk
tanneberger commented 2022-12-17 19:41:48 +01:00 (Migrated from github.com)
Review

should be nix path

should be nix path
{config, ...}: let
tanneberger commented 2022-12-17 19:41:28 +01:00 (Migrated from github.com)
Review

potential security risk

potential security risk
tanneberger commented 2022-12-17 19:41:48 +01:00 (Migrated from github.com)
Review

should be nix path

should be nix path
{ config, ... }:
tanneberger commented 2022-12-17 19:41:28 +01:00 (Migrated from github.com)
Review

potential security risk

potential security risk
tanneberger commented 2022-12-17 19:41:48 +01:00 (Migrated from github.com)
Review

should be nix path

should be nix path
let
tanneberger commented 2022-12-17 19:41:28 +01:00 (Migrated from github.com)
Review

potential security risk

potential security risk
tanneberger commented 2022-12-17 19:41:48 +01:00 (Migrated from github.com)
Review

should be nix path

should be nix path
# temporary url, zum testen auf laptop zuhause
tld = "moe";
hostname = "eisvogel";
@ -9,7 +10,8 @@
tanneberger commented 2022-12-17 19:41:28 +01:00 (Migrated from github.com)
Review

potential security risk

potential security risk
tanneberger commented 2022-12-17 19:41:48 +01:00 (Migrated from github.com)
Review

should be nix path

should be nix path
tanneberger commented 2022-12-17 19:41:28 +01:00 (Migrated from github.com)
Review

potential security risk

potential security risk
tanneberger commented 2022-12-17 19:41:48 +01:00 (Migrated from github.com)
Review

should be nix path

should be nix path
ldapUser = "openldap";
ldapGroup = "openldap";
in {
tanneberger commented 2022-12-17 19:41:28 +01:00 (Migrated from github.com)
Review

potential security risk

potential security risk
tanneberger commented 2022-12-17 19:41:48 +01:00 (Migrated from github.com)
Review

should be nix path

should be nix path
in
tanneberger commented 2022-12-17 19:41:28 +01:00 (Migrated from github.com)
Review

potential security risk

potential security risk
tanneberger commented 2022-12-17 19:41:48 +01:00 (Migrated from github.com)
Review

should be nix path

should be nix path
{
tanneberger commented 2022-12-17 19:41:28 +01:00 (Migrated from github.com)
Review

potential security risk

potential security risk
tanneberger commented 2022-12-17 19:41:48 +01:00 (Migrated from github.com)
Review

should be nix path

should be nix path
users.users."${portunusUser}" = {
isSystemUser = true;
group = "${portunusGroup}";
@ -17,7 +19,7 @@ in {
tanneberger commented 2022-12-17 19:41:28 +01:00 (Migrated from github.com)
Review

potential security risk

potential security risk
tanneberger commented 2022-12-17 19:41:48 +01:00 (Migrated from github.com)
Review

should be nix path

should be nix path
tanneberger commented 2022-12-17 19:41:28 +01:00 (Migrated from github.com)
Review

potential security risk

potential security risk
tanneberger commented 2022-12-17 19:41:48 +01:00 (Migrated from github.com)
Review

should be nix path

should be nix path
users.groups."${portunusGroup}" = {
name = "${portunusGroup}";
members = ["${portunusUser}"];
tanneberger commented 2022-12-17 19:41:28 +01:00 (Migrated from github.com)
Review

potential security risk

potential security risk
tanneberger commented 2022-12-17 19:41:48 +01:00 (Migrated from github.com)
Review

should be nix path

should be nix path
members = [ "${portunusUser}" ];
tanneberger commented 2022-12-17 19:41:28 +01:00 (Migrated from github.com)
Review

potential security risk

potential security risk
tanneberger commented 2022-12-17 19:41:48 +01:00 (Migrated from github.com)
Review

should be nix path

should be nix path
};
users.users."${ldapUser}" = {
@ -27,7 +29,7 @@ in {
tanneberger commented 2022-12-17 19:41:28 +01:00 (Migrated from github.com)
Review

potential security risk

potential security risk
tanneberger commented 2022-12-17 19:41:48 +01:00 (Migrated from github.com)
Review

should be nix path

should be nix path
tanneberger commented 2022-12-17 19:41:28 +01:00 (Migrated from github.com)
Review

potential security risk

potential security risk
tanneberger commented 2022-12-17 19:41:48 +01:00 (Migrated from github.com)
Review

should be nix path

should be nix path
users.groups."${ldapGroup}" = {
name = "${ldapGroup}";
members = ["${ldapUser}"];
tanneberger commented 2022-12-17 19:41:28 +01:00 (Migrated from github.com)
Review

potential security risk

potential security risk
tanneberger commented 2022-12-17 19:41:48 +01:00 (Migrated from github.com)
Review

should be nix path

should be nix path
members = [ "${ldapUser}" ];
tanneberger commented 2022-12-17 19:41:28 +01:00 (Migrated from github.com)
Review

potential security risk

potential security risk
tanneberger commented 2022-12-17 19:41:48 +01:00 (Migrated from github.com)
Review

should be nix path

should be nix path
};
# TODO: eigenes secrets.yaml für seedfile?

tanneberger commented 2022-12-17 19:41:28 +01:00 (Migrated from github.com)
Review

potential security risk

potential security risk
tanneberger commented 2022-12-17 19:41:48 +01:00 (Migrated from github.com)
Review

should be nix path

should be nix path
tanneberger commented 2022-12-17 19:41:28 +01:00 (Migrated from github.com)
Review

potential security risk

potential security risk
tanneberger commented 2022-12-17 19:41:48 +01:00 (Migrated from github.com)
Review

should be nix path

should be nix path