plasmagoat/homelab
1
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions

forgot password
Some checks failed
Test / tests (push) Failing after 2m13s
Details

Browse source
This commit is contained in:
plasmagoat 2025-07-17 12:22:38 +02:00
parent 032072374b
commit 6972897c46
1 changed files with 16 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

16
machines/auth/lldap.nix
View file

@ -15,6 +15,10 @@ in {
"lldap/admin_password".owner = "lldap"; "lldap/admin_password".owner = "lldap";
}; };
sops.templates."lldap_config.toml".content = ''
LLDAP_SMTP_OPTIONS__PASSWORD=${config.sops.placeholder."lldap/admin_password"}
'';
networking.firewall.allowedTCPPorts = [ networking.firewall.allowedTCPPorts = [
cfg.settings.http_port cfg.settings.http_port
cfg.settings.ldap_port cfg.settings.ldap_port
@ -25,8 +29,11 @@ in {
services.lldap = { services.lldap = {
enable = true; enable = true;
settings = { settings = {
verbose = true;
ldap_base_dn = "dc=procopius,dc=dk"; ldap_base_dn = "dc=procopius,dc=dk";
ldap_user_email = "admin@procopius.dk"; ldap_user_email = "admin@procopius.dk";
http_url = "https://lldap.procopius.dk";
enable_password_reset = true;
database_url = "postgresql://lldap@localhost/lldap?host=/run/postgresql"; database_url = "postgresql://lldap@localhost/lldap?host=/run/postgresql";
}; };
@ -34,7 +41,16 @@ in {
LLDAP_JWT_SECRET_FILE = config.sops.secrets."lldap/jwt_secret".path; LLDAP_JWT_SECRET_FILE = config.sops.secrets."lldap/jwt_secret".path;
LLDAP_KEY_SEED_FILE = config.sops.secrets."lldap/key_seed".path; LLDAP_KEY_SEED_FILE = config.sops.secrets."lldap/key_seed".path;
LLDAP_LDAP_USER_PASS_FILE = config.sops.secrets."lldap/admin_password".path; LLDAP_LDAP_USER_PASS_FILE = config.sops.secrets."lldap/admin_password".path;
LLDAP_SMTP_OPTIONS__ENABLE_PASSWORD_RESET = "true";
LLDAP_SMTP_OPTIONS__SERVER = "mail.procopius.dk";
LLDAP_SMTP_OPTIONS__PORT = "465";
LLDAP_SMTP_OPTIONS__SMTP_ENCRYPTION = "TLS";
LLDAP_SMTP_OPTIONS__USER = "admin@procopius.dk";
LLDAP_SMTP_OPTIONS__FROM = "LLDAP Admin <admin@procopius.dk>";
LLDAP_SMTP_OPTIONS__REPLY_TO = "Do not reply <noreply@procopius.dk>";
}; };
environmentFile = config.sops.templates."lldap_config.toml".path;
}; };
systemd.services.lldap = let systemd.services.lldap = let