plasmagoat/homelab
1
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions

Compare commits

base: plasmagoat:5dede30f62cd099b3e70966f91a559c26bee0774
Branches Tags
plasmagoat:main
plasmagoat:automated-pr
..
compare: plasmagoat:2f72b0894a63ba62b58f43048fb132bfc8b22737
Branches Tags
plasmagoat:automated-pr
plasmagoat:main

1 commit
5dede30f62 ... 2f72b0894a

Author SHA1 Message Date
Forgejo Bot
2f72b0894a feat: automated changes 2025-07-17 06:01:16 +00:00
2 changed files with 3 additions and 19 deletions
Download patch file Download diff file Expand all files Collapse all files

6
flake.lock generated
View file

@ -188,11 +188,11 @@
}, },
"nixpkgs_2": { "nixpkgs_2": {
"locked": { "locked": {
"lastModified": 1752817886, "lastModified": 1752731184,
"narHash": "sha256-ixiHcBqWAubQYbXEXeEnqhwEj9Bz7GoLL904bZ+Autc=", "narHash": "sha256-gxXbkDyWNqXH0M2HLmNhP51yY7PSZkXoshXSCh+DVIk=",
"owner": "nixos", "owner": "nixos",
"repo": "nixpkgs", "repo": "nixpkgs",
"rev": "3ee71bd9a139787964bc89c67989fda8ccc599e6", "rev": "558243f9250d98ab34959cff321fa3bfd58ca6dd",
"type": "github" "type": "github"
}, },
"original": { "original": {

16
machines/auth/lldap.nix
View file

@ -15,10 +15,6 @@ in {
"lldap/admin_password".owner = "lldap"; "lldap/admin_password".owner = "lldap";
}; };
sops.templates."lldap_config.toml".content = ''
LLDAP_SMTP_OPTIONS__PASSWORD=${config.sops.placeholder."lldap/admin_password"}
'';
networking.firewall.allowedTCPPorts = [ networking.firewall.allowedTCPPorts = [
cfg.settings.http_port cfg.settings.http_port
cfg.settings.ldap_port cfg.settings.ldap_port
@ -29,11 +25,8 @@ in {
services.lldap = { services.lldap = {
enable = true; enable = true;
settings = { settings = {
verbose = true;
ldap_base_dn = "dc=procopius,dc=dk"; ldap_base_dn = "dc=procopius,dc=dk";
ldap_user_email = "admin@procopius.dk"; ldap_user_email = "admin@procopius.dk";
http_url = "https://lldap.procopius.dk";
enable_password_reset = true;
database_url = "postgresql://lldap@localhost/lldap?host=/run/postgresql"; database_url = "postgresql://lldap@localhost/lldap?host=/run/postgresql";
}; };
@ -41,16 +34,7 @@ in {
LLDAP_JWT_SECRET_FILE = config.sops.secrets."lldap/jwt_secret".path; LLDAP_JWT_SECRET_FILE = config.sops.secrets."lldap/jwt_secret".path;
LLDAP_KEY_SEED_FILE = config.sops.secrets."lldap/key_seed".path; LLDAP_KEY_SEED_FILE = config.sops.secrets."lldap/key_seed".path;
LLDAP_LDAP_USER_PASS_FILE = config.sops.secrets."lldap/admin_password".path; LLDAP_LDAP_USER_PASS_FILE = config.sops.secrets."lldap/admin_password".path;
LLDAP_SMTP_OPTIONS__ENABLE_PASSWORD_RESET = "true";
LLDAP_SMTP_OPTIONS__SERVER = "mail.procopius.dk";
LLDAP_SMTP_OPTIONS__PORT = "465";
LLDAP_SMTP_OPTIONS__SMTP_ENCRYPTION = "TLS";
LLDAP_SMTP_OPTIONS__USER = "admin@procopius.dk";
LLDAP_SMTP_OPTIONS__FROM = "LLDAP Admin <admin@procopius.dk>";
LLDAP_SMTP_OPTIONS__REPLY_TO = "Do not reply <noreply@procopius.dk>";
}; };
environmentFile = config.sops.templates."lldap_config.toml".path;
}; };
systemd.services.lldap = let systemd.services.lldap = let