cluster/services/irc: add PAM configuration

This commit is contained in:
Max Headroom 2022-09-18 23:05:03 +02:00
parent 92c9f5d680
commit 1ffd88cfe3

View file

@ -67,6 +67,12 @@ in {
reloadServices = [ "ngircd" ];
extraDomainNames = [ "irc.${domain}" ];
};
security.pam.services.ngircd = {
text = ''
# verify IRC users via SSSD
auth required ${pkgs.sssd}/lib/security/pam_sss.so
'';
};
age.secrets = { inherit (vars) ircPeerKey; };
systemd.services.ngircd = {
after = [ "acme-finished-${serverName}.target" "dhparams-gen-ngircd.service" ];