thary/sp-config
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

refact: auth: variable for generated keys path in auth.nix

Browse Source
This commit is contained in:
Alexander Tomokhov
2025-03-16 19:50:41 +04:00
parent c49a93bf9c
commit 403c4b31b1
1 changed files with 145 additions and 145 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
auth/auth.nix
View File

@@ -7,6 +7,8 @@ let
ldap-host = "127.0.0.1"; ldap-host = "127.0.0.1";
ldap-port = 3636; ldap-port = 3636;
keys-path = "/run/keys";
admins-group = "sp.admins"; admins-group = "sp.admins";
full-users-group = "sp.full_users"; full-users-group = "sp.full_users";
@@ -19,7 +21,7 @@ let
kanidm-service-account-token-name = kanidm-service-account-token-name =
"${selfprivacy-group}-service-account-token"; "${selfprivacy-group}-service-account-token";
kanidm-service-account-token-fp = kanidm-service-account-token-fp =
"/run/keys/${selfprivacy-group}/kanidm-service-account-token"; "${keys-path}/${selfprivacy-group}/kanidm-service-account-token";
kanidmExecStartPreScriptRoot = pkgs.writeShellScript kanidmExecStartPreScriptRoot = pkgs.writeShellScript
"${selfprivacy-group}-kanidm-ExecStartPre-root-script.sh" "${selfprivacy-group}-kanidm-ExecStartPre-root-script.sh"
'' ''
@@ -74,13 +76,12 @@ let
fi fi
''; '';
# lua stuff for debugging only # lua stuff for nginx for debugging only
lua_core_path = "${pkgs.luajitPackages.lua-resty-core}/lib/lua/5.1/?.lua"; lua_core_path = "${pkgs.luajitPackages.lua-resty-core}/lib/lua/5.1/?.lua";
lua_lrucache_path = "${pkgs.luajitPackages.lua-resty-lrucache}/lib/lua/5.1/?.lua"; lua_lrucache_path = "${pkgs.luajitPackages.lua-resty-lrucache}/lib/lua/5.1/?.lua";
lua_path = "${lua_core_path};${lua_lrucache_path};"; lua_path = "${lua_core_path};${lua_lrucache_path};";
in in
{ lib.mkIf config.selfprivacy.sso.enable {
config = lib.mkIf config.selfprivacy.sso.enable {
nixpkgs.overlays = [ nixpkgs.overlays = [
( (
_final: prev: { _final: prev: {
@@ -237,5 +238,4 @@ in
(x: "dc=" + x) (x: "dc=" + x)
(lib.strings.splitString "." domain); (lib.strings.splitString "." domain);
}; };
};
} }