depot/cluster/services/sso/default.nix

22 lines
371 B
Nix

{ depot, ... }:
{
services.sso = {
nodes = {
host = [ "VEGAS" ];
oauth2-proxy = [ "VEGAS" ];
};
nixos = {
host = ./host.nix;
oauth2-proxy = ./oauth2-proxy.nix;
};
};
dns.records = let
ssoAddr = [ depot.hours.VEGAS.interfaces.primary.addrPublic ];
in {
login.target = ssoAddr;
account.target = ssoAddr;
};
}