raphael/nixos
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(self_hosts/sso): adding the new syntax for kanidm

Browse source
This commit is contained in:
Raphael 2026-02-28 16:44:13 +01:00
parent fd6110694e
commit 76eb961891
No known key found for this signature in database
1 changed files with 18 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

32
services/self_host/sso.nix
View file

@ -26,10 +26,10 @@ let
sha256 = "sha256-hL51zJkFxUys1CoM8yUxiH8BDw111wh3Qv7eTLm+XYo="; sha256 = "sha256-hL51zJkFxUys1CoM8yUxiH8BDw111wh3Qv7eTLm+XYo=";
}; };
in in
{ {
config = lib.mkIf cfg { config = lib.mkIf cfg {
users = { users = {
groups.kanidm = {}; groups.kanidm = { };
users.kanidm = { users.kanidm = {
isSystemUser = true; isSystemUser = true;
group = "kanidm"; group = "kanidm";
@ -40,16 +40,20 @@ in
services = { services = {
kanidm = { kanidm = {
package = pkgs.kanidmWithSecretProvisioning_1_8; package = pkgs.kanidmWithSecretProvisioning_1_8;
enableServer = true; server = {
serverSettings = { enable = true;
domain = "enium.eu"; settings = {
origin = "https://auth.enium.eu"; domain = "enium.eu";
bindaddress = "127.0.0.1:9000"; origin = "https://auth.enium.eu";
tls_chain = "/var/lib/acme/auth.enium.eu/fullchain.pem"; bindaddress = "127.0.0.1:9000";
tls_key = "/var/lib/acme/auth.enium.eu/key.pem"; tls_chain = "/var/lib/acme/auth.enium.eu/fullchain.pem";
tls_key = "/var/lib/acme/auth.enium.eu/key.pem";
};
};
client = {
enable = true;
settings.uri = config.services.kanidm.server.settings.origin;
}; };
enableClient = true;
clientSettings.uri = config.services.kanidm.serverSettings.origin;
provision = { provision = {
enable = true; enable = true;
autoRemove = false; autoRemove = false;
@ -211,19 +215,19 @@ in
email = { email = {
joinType = "array"; joinType = "array";
valuesByGroup = { valuesByGroup = {
nextcloud_user = ["mail"]; nextcloud_user = [ "mail" ];
}; };
}; };
preferred_username = { preferred_username = {
joinType = "array"; joinType = "array";
valuesByGroup = { valuesByGroup = {
nextcloud_user = ["name"]; nextcloud_user = [ "name" ];
}; };
}; };
name = { name = {
joinType = "array"; joinType = "array";
valuesByGroup = { valuesByGroup = {
nextcloud_user = ["displayname"]; nextcloud_user = [ "displayname" ];
}; };
}; };
}; };