Skynet/nixos
6
1
Fork 0
Code Issues 43 Pull requests 1 Projects Releases Packages Wiki Activity Actions

fix: got permissions "working" for teh password reset, not ideal though

Browse source
This commit is contained in:
silver 2023-05-21 03:09:24 +01:00
parent 60e33e2abb
commit 48a23519e9
1 changed files with 7 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
applications/ldap.nix
View file

@ -54,7 +54,11 @@ Gonna use a priper nixos module for this
};
# openldap
age.secrets.ldap_self_service.file = ../secrets/ldap/self_service.age;
age.secrets.ldap_self_service = {
file = ../secrets/ldap/self_service.age;
# not ideal but non admins should never be on this system
mode = "444";
};
skynet_dns.records.cname = [
"${cfg.subdomain} CNAME ${cfg.host.name}"
@ -156,13 +160,10 @@ Gonna use a priper nixos module for this
backend = "docker";
projects = {
ldap_reset.settings.services.ldap_reset.service = {
user = "root";
image = "docker.io/ltbproject/self-service-password:1.5.3";
# setting these here as they arent special
environment = {
# this is what it last ran on
SPIGOT_VER="1.18.2";
EULA="true";
};
# where the config files are stored
volumes = [