privatevoid.net/depot
1
1
Fork 0
Code Issues 23 Pull requests 2 Projects 3 Releases Packages Wiki Activity Actions

cluster/services/idm: add policy for soda

Browse source
This commit is contained in:
Max Headroom 2023-06-11 17:07:45 +02:00
parent 6dcdf7aeaa
commit a9801c3308
2 changed files with 12 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
cluster/services/idm/default.nix
View file

@ -11,6 +11,7 @@
nodes = { nodes = {
server = [ "VEGAS" ]; server = [ "VEGAS" ];
client = [ "checkmate" "VEGAS" "prophet" "soda" "thunderskin" ]; client = [ "checkmate" "VEGAS" "prophet" "soda" "thunderskin" ];
client-soda = [ "soda" ];
}; };
nixos = { nixos = {
server = ./server.nix; server = ./server.nix;
@ -18,6 +19,9 @@
./client.nix ./client.nix
./policies/infra-admins.nix ./policies/infra-admins.nix
]; ];
client-soda = [
./policies/soda.nix
];
}; };
}; };
} }

8
cluster/services/idm/policies/soda.nix Normal file
View file

@ -0,0 +1,8 @@
{
services.kanidm.unixSettings = {
pam_allowed_login_groups = [
"soda"
"soda-admins"
];
};
}