raphael/nixos
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(self_hosts/sso): adding the new syntax for kanidm

Browse source
This commit is contained in:
Raphael 2026-02-28 16:44:13 +01:00
parent fd6110694e
commit 76eb961891
No known key found for this signature in database
1 changed files with 18 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

12
services/self_host/sso.nix
View file

@ -40,16 +40,20 @@ in
services = {
kanidm = {
package = pkgs.kanidmWithSecretProvisioning_1_8;
enableServer = true;
serverSettings = {
server = {
enable = true;
settings = {
domain = "enium.eu";
origin = "https://auth.enium.eu";
bindaddress = "127.0.0.1:9000";
tls_chain = "/var/lib/acme/auth.enium.eu/fullchain.pem";
tls_key = "/var/lib/acme/auth.enium.eu/key.pem";
};
enableClient = true;
clientSettings.uri = config.services.kanidm.serverSettings.origin;
};
client = {
enable = true;
settings.uri = config.services.kanidm.server.settings.origin;
};
provision = {
enable = true;
autoRemove = false;