raphael/nixos
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(self_hosts/sso): adding the new syntax for kanidm

Browse source
This commit is contained in:
Raphael 2026-02-28 16:44:13 +01:00
parent fd6110694e
commit 76eb961891
No known key found for this signature in database
1 changed files with 18 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

12
services/self_host/sso.nix
View file

@ -40,16 +40,20 @@ in
services = { services = {
kanidm = { kanidm = {
package = pkgs.kanidmWithSecretProvisioning_1_8; package = pkgs.kanidmWithSecretProvisioning_1_8;
enableServer = true; server = {
serverSettings = { enable = true;
settings = {
domain = "enium.eu"; domain = "enium.eu";
origin = "https://auth.enium.eu"; origin = "https://auth.enium.eu";
bindaddress = "127.0.0.1:9000"; bindaddress = "127.0.0.1:9000";
tls_chain = "/var/lib/acme/auth.enium.eu/fullchain.pem"; tls_chain = "/var/lib/acme/auth.enium.eu/fullchain.pem";
tls_key = "/var/lib/acme/auth.enium.eu/key.pem"; tls_key = "/var/lib/acme/auth.enium.eu/key.pem";
}; };
enableClient = true; };
clientSettings.uri = config.services.kanidm.serverSettings.origin; client = {
enable = true;
settings.uri = config.services.kanidm.server.settings.origin;
};
provision = { provision = {
enable = true; enable = true;
autoRemove = false; autoRemove = false;