raphael/nixos
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(self_host/sso): adding the Nextcloud kanidm

Browse source
This commit is contained in:
Raphael 2025-12-16 22:17:13 +01:00
parent 05fb64696b
commit 60d98af648
No known key found for this signature in database
1 changed files with 45 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

45
services/self_host/sso.nix
View file

@ -49,6 +49,51 @@ in
];
};
};
groups = {
nextcloud_user = {
present = true;
};
};
systems.oauth2 = {
nextcloud = {
present = true;
displayName = "Nextcloud";
originUrl = "https://nextcloud.enium.eu";
originLanding = "https://nextcloud.enium.eu/login";
basicSecretFile = config.age.secrets.nextcloud-oidc-secret.path;
public = false;
enableLocalhostRedirects = false;
allowInsecureClientDisablePkce = false;
preferShortUsername = true;
scopeMaps = {
nextcloud_user = [
"openid"
"profile"
"email"
];
};
claimMaps = {
email = {
joinType = "array";
valuesByGroup = {
nextcloud_user = ["mail"];
};
};
preferred_username = {
joinType = "array";
valuesByGroup = {
nextcloud_user = ["name"];
};
};
name = {
joinType = "array";
valuesByGroup = {
nextcloud_user = ["displayname"];
};
};
};
};
};
};
};
nginx.virtualHosts."auth.enium.eu" = {