Skynet/nixos
6
1
Fork 0
Code Issues 43 Pull requests 1 Projects Releases Packages Wiki Activity Actions

feat: ldap now has secrets properly stored

Browse source
This commit is contained in:
silver 2023-05-20 21:33:04 +01:00
parent b61a645824
commit 4e664ce1bc
1 changed files with 6 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
applications/ldap.nix
View file

@ -45,6 +45,10 @@ Gonna use a priper nixos module for this
config = mkIf cfg.enable {
# this is athe actual configuration that we need to do
# im poort in teh secrets for this
age.secrets.ldap_pw.file = ../secrets/ldap/pw.age;
age.secrets.ldap_self_service.file = ../secrets/ldap/ldap_self_service.age;
skynet_dns.records.cname = [
"${cfg.subdomain} CNAME ${cfg.host.name}"
];
@ -99,7 +103,7 @@ Gonna use a priper nixos module for this
/* your admin account, do not use writeText on a production system */
olcRootDN = "cn=admin,${base}";
olcRootPW.path = pkgs.writeText "olcRootPW" "westwood";
olcRootPW.path = config.age.secrets.ldap_pw.path;
#olcOverlay = "memberof";
@ -155,7 +159,7 @@ Gonna use a priper nixos module for this
# where the config files are stored
volumes = [
"${./testing.php}:/var/www/conf/config.inc.local.php"
"${config.age.secrets.ldap_self_service.path}:/var/www/conf/config.inc.local.php"
];
ports = [