Skynet/nixos
6
1
Fork 0
Code Issues 43 Pull requests 1 Projects Releases Packages Wiki Activity Actions

feat: ldap now has secrets properly stored

Browse source
This commit is contained in:
silver 2023-05-20 21:33:04 +01:00
parent b61a645824
commit 4e664ce1bc
1 changed files with 6 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
applications/ldap.nix
View file

@ -45,6 +45,10 @@ Gonna use a priper nixos module for this
config = mkIf cfg.enable { config = mkIf cfg.enable {
# this is athe actual configuration that we need to do # this is athe actual configuration that we need to do
# im poort in teh secrets for this
age.secrets.ldap_pw.file = ../secrets/ldap/pw.age;
age.secrets.ldap_self_service.file = ../secrets/ldap/ldap_self_service.age;
skynet_dns.records.cname = [ skynet_dns.records.cname = [
"${cfg.subdomain} CNAME ${cfg.host.name}" "${cfg.subdomain} CNAME ${cfg.host.name}"
]; ];
@ -99,7 +103,7 @@ Gonna use a priper nixos module for this
/* your admin account, do not use writeText on a production system */ /* your admin account, do not use writeText on a production system */
olcRootDN = "cn=admin,${base}"; olcRootDN = "cn=admin,${base}";
olcRootPW.path = pkgs.writeText "olcRootPW" "westwood"; olcRootPW.path = config.age.secrets.ldap_pw.path;
#olcOverlay = "memberof"; #olcOverlay = "memberof";
@ -155,7 +159,7 @@ Gonna use a priper nixos module for this
# where the config files are stored # where the config files are stored
volumes = [ volumes = [
"${./testing.php}:/var/www/conf/config.inc.local.php" "${config.age.secrets.ldap_self_service.path}:/var/www/conf/config.inc.local.php"
]; ];
ports = [ ports = [