privatevoid.net/depot
1
1
Fork 0
Code Issues 23 Pull requests 2 Projects 3 Releases Packages Wiki Activity Actions

cluster/services/idm: use cluster secrets

Browse source
This commit is contained in:
Max Headroom 2024-07-08 18:41:51 +02:00
parent deaa423c86
commit 7b95308f0d
8 changed files with 5 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

0
cluster/services/idm/secrets/service-account-VEGAS.age → cluster/secrets/idm-serviceAccountCredentials-VEGAS.age
View file

0
cluster/services/idm/secrets/service-account-checkmate.age → cluster/secrets/idm-serviceAccountCredentials-checkmate.age
View file

0
cluster/services/idm/secrets/service-account-grail.age → cluster/secrets/idm-serviceAccountCredentials-grail.age
View file

0
cluster/services/idm/secrets/service-account-prophet.age → cluster/secrets/idm-serviceAccountCredentials-prophet.age
View file

0
cluster/services/idm/secrets/service-account-soda.age → cluster/secrets/idm-serviceAccountCredentials-soda.age
View file

0
cluster/services/idm/secrets/service-account-thunderskin.age → cluster/secrets/idm-serviceAccountCredentials-thunderskin.age
View file

4
cluster/services/idm/client.nix
View file

@ -5,10 +5,8 @@ let
in
{
age.secrets.idmServiceAccountCredentials.file = ./secrets/service-account-${config.networking.hostName}.age;
systemd.services.kanidm-unixd.serviceConfig = {
EnvironmentFile = config.age.secrets.idmServiceAccountCredentials.path;
EnvironmentFile = cluster.config.services.idm.secrets.serviceAccountCredentials.path;
};
services.kanidm = {

4
cluster/services/idm/default.nix
View file

@ -33,6 +33,10 @@
./policies/soda.nix
];
};
secrets.serviceAccountCredentials = {
nodes = config.services.idm.nodes.client;
shared = false;
};
};
dns.records = let