thary/sp-config
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

passthru.selfprivacy.auth.admins-group = "sp.admins"

Browse Source
This commit is contained in:
Alexander Tomokhov
2025-01-25 23:20:00 +04:00
parent d008fbcc17
commit 2ed4cc0dee
4 changed files with 5 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
sp-modules/auth/module.nix
View File

@@ -97,7 +97,7 @@ in
provision = { provision = {
enable = true; enable = true;
autoRemove = true; # if false, obsolete oauth2 scopeMaps remain autoRemove = true; # if false, obsolete oauth2 scopeMaps remain
groups."sp.admins".present = true; groups.${passthru.admins-group}.present = true;
groups.${passthru.full-users-group}.present = true; groups.${passthru.full-users-group}.present = true;
}; };
enableClient = true; enableClient = true;
@@ -186,6 +186,7 @@ in
ldap-host = "127.0.0.1"; ldap-host = "127.0.0.1";
ldap-port = 3636; ldap-port = 3636;
admins-group = "sp.admins";
full-users-group = "sp.full_users"; full-users-group = "sp.full_users";
}; };
}; };

2
sp-modules/gitea/module.nix
View File

@@ -413,7 +413,7 @@ in
services.kanidm.provision = { services.kanidm.provision = {
groups = { groups = {
"${admins-group}".members = [ "sp.admins" ]; "${admins-group}".members = [ auth-passthru.admins-group ];
"${users-group}".members = "${users-group}".members =
[ admins-group auth-passthru.full-users-group ]; [ admins-group auth-passthru.full-users-group ];
}; };

2
sp-modules/nextcloud/module.nix
View File

@@ -382,7 +382,7 @@ in
}; };
services.kanidm.provision = { services.kanidm.provision = {
groups = { groups = {
"${admins-group}".members = [ "sp.admins" ]; "${admins-group}".members = [ auth-passthru.admins-group ];
"${users-group}".members = "${users-group}".members =
[ admins-group auth-passthru.full-users-group ]; [ admins-group auth-passthru.full-users-group ];
}; };

2
sp-modules/roundcube/module.nix
View File

@@ -101,7 +101,7 @@ in
}; };
services.kanidm.provision = { services.kanidm.provision = {
groups = { groups = {
"sp.roundcube.admins".members = [ "sp.admins" ]; "sp.roundcube.admins".members = [ auth-passthru.admins-group ];
"sp.roundcube.users".members = "sp.roundcube.users".members =
[ "sp.roundcube.admins" auth-passthru.full-users-group ]; [ "sp.roundcube.admins" auth-passthru.full-users-group ];
}; };