privatevoid.net/depot
1
1
Fork 0
Code Issues 23 Pull requests 2 Projects 3 Releases Packages Wiki Activity Actions

cluster/services/idm: enable LDAP

Browse source
This commit is contained in:
Max Headroom 2023-06-11 21:33:53 +02:00
parent e34287cd05
commit af6259a8e4
2 changed files with 16 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

18
cluster/services/idm/default.nix
View file

@ -1,10 +1,18 @@
{ tools, ... }:
{ config, tools, ... }:
{
links.idm = {
ipv4 = "idm.${tools.meta.domain}";
port = 443;
protocol = "https";
links = {
idm = {
ipv4 = "idm.${tools.meta.domain}";
port = 443;
protocol = "https";
};
ldap = {
hostname = "idm-ldap.internal.${tools.meta.domain}";
ipv4 = config.vars.mesh.VEGAS.meshIp;
port = 636;
protocol = "ldaps";
};
};
services.idm = {

3
cluster/services/idm/server.nix
View file

@ -7,6 +7,8 @@ let
backendLink = config.links.idmBackend;
ldapLink = cluster.config.links.ldap;
certDir = config.security.acme.certs."internal.${domain}".directory;
in
@ -28,6 +30,7 @@ in
tls_key = "${certDir}/key.pem";
role = "WriteReplicaNoUI";
bindaddress = backendLink.tuple;
ldapbindaddress = "${ldapLink.ipv4}:${ldapLink.portStr}";
origin = frontendLink.url;
inherit domain;
};