Skynet/nixos
6
1
Fork 0
Code Issues 43 Pull requests 1 Projects Releases Packages Wiki Activity Actions

feat: ldap backend updated to accomodate multiple env files

Browse source
This commit is contained in:
silver 2023-08-27 22:31:08 +01:00
parent 31d2d2e23d
commit bfc0d81cf1
4 changed files with 14 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
applications/ldap/ldap_backend.nix
View file

@ -48,6 +48,7 @@
#backups = [ "/etc/silver_ul_ical/database.db" ]; #backups = [ "/etc/silver_ul_ical/database.db" ];
age.secrets.ldap_self_service.file = ../../secrets/ldap/self_service.age; age.secrets.ldap_self_service.file = ../../secrets/ldap/self_service.age;
age.secrets.ldap_discord.file = ../../secrets/discord/ldap.age;
skynet_acme.domains = [ skynet_acme.domains = [
"${cfg.domain.sub}.${cfg.domain.base}.${cfg.domain.tld}" "${cfg.domain.sub}.${cfg.domain.base}.${cfg.domain.tld}"
@ -71,7 +72,10 @@
enable = true; enable = true;
# contains teh password in env form # contains teh password in env form
envFile = config.age.secrets.ldap_self_service.path; env = {
ldap = config.age.secrets.ldap_self_service.path;
discord = config.age.secrets.ldap_discord.path;
};
ldap = { ldap = {
host = "ldaps://account.skynet.ie"; host = "ldaps://account.skynet.ie";

6
flake.lock
View file

@ -395,11 +395,11 @@
}, },
"locked": { "locked": {
"host": "gitlab.skynet.ie", "host": "gitlab.skynet.ie",
"lastModified": 1693164823, "lastModified": 1693168330,
"narHash": "sha256-1VRjCuUmMVFAsWQzkJ4kzWzaCqDSNQ6f6M2h6eVwRwE=", "narHash": "sha256-GohtWXpbsu3usQOSbrXajvsQsrpwpvhdNVMqyi2ioSg=",
"owner": "compsoc1%2Fskynet%2Fldap", "owner": "compsoc1%2Fskynet%2Fldap",
"repo": "backend", "repo": "backend",
"rev": "92fad0dc4bd936802d3324bcb43790530b6212db", "rev": "01b5be26606d048210c1a5c2d0a1c127d8cdf2e7",
"type": "gitlab" "type": "gitlab"
}, },
"original": { "original": {

BIN
secrets/discord/ldap.age Normal file
View file

Binary file not shown.

6
secrets/secrets.nix
View file

@ -86,6 +86,10 @@ let
restic = [ restic = [
neuromancer neuromancer
]; ];
discord = [
kitt
];
in in
{ {
# nix run github:ryantm/agenix -- -e secret1.age # nix run github:ryantm/agenix -- -e secret1.age
@ -115,4 +119,6 @@ in
"backup/restic.age".publicKeys = users ++ systems; "backup/restic.age".publicKeys = users ++ systems;
"backup/restic_pw.age".publicKeys = users ++ restic; "backup/restic_pw.age".publicKeys = users ++ restic;
# discord bot and discord
"discord/ldap.age".publicKeys = users ++ ldap ++ discord;
} }