raphael/nixos
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(self_hosts/sso): adding the new syntax for kanidm

Browse source
This commit is contained in:
Raphael 2026-02-28 16:44:13 +01:00
parent fd6110694e
commit 76eb961891
No known key found for this signature in database
1 changed files with 18 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

22
services/self_host/sso.nix
View file

@ -26,10 +26,10 @@ let
sha256 = "sha256-hL51zJkFxUys1CoM8yUxiH8BDw111wh3Qv7eTLm+XYo=";
};
in
{
{
config = lib.mkIf cfg {
users = {
groups.kanidm = {};
groups.kanidm = { };
users.kanidm = {
isSystemUser = true;
group = "kanidm";
@ -40,16 +40,20 @@ in
services = {
kanidm = {
package = pkgs.kanidmWithSecretProvisioning_1_8;
enableServer = true;
serverSettings = {
server = {
enable = true;
settings = {
domain = "enium.eu";
origin = "https://auth.enium.eu";
bindaddress = "127.0.0.1:9000";
tls_chain = "/var/lib/acme/auth.enium.eu/fullchain.pem";
tls_key = "/var/lib/acme/auth.enium.eu/key.pem";
};
enableClient = true;
clientSettings.uri = config.services.kanidm.serverSettings.origin;
};
client = {
enable = true;
settings.uri = config.services.kanidm.server.settings.origin;
};
provision = {
enable = true;
autoRemove = false;
@ -211,19 +215,19 @@ in
email = {
joinType = "array";
valuesByGroup = {
nextcloud_user = ["mail"];
nextcloud_user = [ "mail" ];
};
};
preferred_username = {
joinType = "array";
valuesByGroup = {
nextcloud_user = ["name"];
nextcloud_user = [ "name" ];
};
};
name = {
joinType = "array";
valuesByGroup = {
nextcloud_user = ["displayname"];
nextcloud_user = [ "displayname" ];
};
};
};