services/glauth: LDAP insecure is bad, probably

This commit is contained in:
kat witch 2021-09-05 16:30:25 +01:00
parent 250399c2b7
commit 3d801a9d84
No known key found for this signature in database
GPG key ID: 1B477797DCA5EC72

View file

@ -1,5 +1,5 @@
{ config, tf, lib, ... }: with lib; {
network.firewall.public.tcp.ports = [ 3983 3984 ];
network.firewall.public.tcp.ports = [ 3984 ];
network.extraCerts.domain-auth = "auth.${config.network.dns.domain}";
users.groups.domain-auth.members = [ "nginx" "glauth" ];
@ -17,7 +17,7 @@
settings = {
syslog = true;
ldap = {
enabled = true;
enabled = false;
listen = "0.0.0.0:3893";
};
ldaps = {