feat: new ldap backend api is up and running, with ci as well

applications/ldap/ldap_backend.nix

@@ -0,0 +1,89 @@
+{ config, pkgs, lib, ... }:
+  with lib;
+  let
+    cfg = config.services.ldap_backend;
+    port_backend = "8087";
+  in {
+
+  imports = [
+    ../acme.nix
+    ../dns.nix
+    ../nginx.nix
+  ];
+
+  options.services.ldap_backend = {
+    enable = mkEnableOption "Skynet LDAP backend server";
+
+    host = {
+      ip = mkOption {
+        type = types.str;
+      };
+
+      name = mkOption {
+        type = types.str;
+      };
+    };
+
+    domain = {
+      tld = mkOption {
+        type = types.str;
+        default = "ie";
+      };
+
+      base = mkOption {
+        type = types.str;
+        default = "skynet";
+      };
+
+      sub = mkOption {
+        type = types.str;
+        default = "api.sso";
+      };
+    };
+  };
+
+  config = mkIf cfg.enable {
+
+    #backups = [ "/etc/silver_ul_ical/database.db" ];
+
+    age.secrets.ldap_self_service.file = ../../secrets/ldap/self_service.age;
+
+    skynet_dns.records.cname = [
+      "${cfg.domain.sub} CNAME ${cfg.host.name}"
+    ];
+
+    services.nginx.virtualHosts."${cfg.domain.sub}.${cfg.domain.base}.${cfg.domain.tld}" = {
+      forceSSL = true;
+      useACMEHost = "skynet";
+      locations."/".proxyPass = "http://localhost:${port_backend}";
+    };
+
+    services.skynet_ldap_backend = {
+      enable = true;
+
+      # contains teh password in env form
+      envFile = config.age.secrets.ldap_self_service.path;
+
+      ldap  = {
+        host = "ldaps://sso.skynet.ie";
+        admin = "cn=admin,dc=skynet,dc=ie";
+      };
+
+      users = {
+        admin = [
+          "silver"
+          "evanc"
+          "eoghanconlon73"
+        ];
+        committee = [
+          "silver"
+          "eoghanconlon73"
+        ];
+        lifetime = [];
+        banned = [];
+      };
+
+      host_port = "127.0.0.1:${port_backend}";
+    };
+  };
+}