cluster/services/irc: add PAM configuration

This commit is contained in:
Max Headroom 2022-09-18 23:05:03 +02:00
parent 92c9f5d680
commit 1ffd88cfe3

View file

@ -67,6 +67,12 @@ in {
reloadServices = [ "ngircd" ]; reloadServices = [ "ngircd" ];
extraDomainNames = [ "irc.${domain}" ]; extraDomainNames = [ "irc.${domain}" ];
}; };
security.pam.services.ngircd = {
text = ''
# verify IRC users via SSSD
auth required ${pkgs.sssd}/lib/security/pam_sss.so
'';
};
age.secrets = { inherit (vars) ircPeerKey; }; age.secrets = { inherit (vars) ircPeerKey; };
systemd.services.ngircd = { systemd.services.ngircd = {
after = [ "acme-finished-${serverName}.target" "dhparams-gen-ngircd.service" ]; after = [ "acme-finished-${serverName}.target" "dhparams-gen-ngircd.service" ];