privatevoid.net/depot
1
1
Fork 0
Code Issues 18 Pull requests 2 Projects 3 Releases Packages Wiki Activity Actions

VEGAS/sso: drop ident

Browse source
This commit is contained in:
Max Headroom 2023-10-25 17:44:28 +02:00
parent b5b1923ef0
commit 1754fc1048
2 changed files with 0 additions and 26 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
hosts/VEGAS/services/sso/default.nix
View file

@ -8,9 +8,6 @@ in
{
links.keycloak.protocol = "http";
imports = [
./identity-management.nix
];
age.secrets.keycloak-dbpass = {
file = ../../../../secrets/keycloak-dbpass.age;
owner = "root";

23
hosts/VEGAS/services/sso/identity-management.nix
View file

@ -1,23 +0,0 @@
{ depot, ... }:
with depot.lib.nginx.vhosts;
let
inherit (depot.lib.meta) domain;
front = "ident.${domain}";
back = depot.lib.identity.ldap.server.hostname;
in
{
services.nginx.virtualHosts."${front}" = basic // {
locations."= /".return = "302 /ipa/ui/";
locations."/" = {
# HACK: not using proxy_pass here to prevent inclusion of recommended headers
extraConfig = ''
proxy_pass https://10.10.0.11;
proxy_set_header Host ${back};
proxy_set_header Referer https://${back}/ipa/ui/;
proxy_cookie_domain ${back} ${front};
add_header Referer https://${front}/ipa/ui/;
'';
};
};
}