gensokyo-zone/infrastructure
1
0
Fork 0
mirror of https://github.com/gensokyo-zone/infrastructure.git synced 2026-02-09 04:19:19 -08:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat(keycloak): add, broken

Browse source
This commit is contained in:
Kat Inskip 2024-03-13 15:21:08 -07:00
parent e63304937d
commit 7ff72a29ab
Signed by: kat
GPG key ID: 465E64DECEA8CF0F
6 changed files with 223 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

25
nixos/keycloak.nix Normal file
View file

@ -0,0 +1,25 @@
{config, ...}: {
sops.secrets = let
commonSecret = {
sopsFile = ./secrets/keycloak.yaml;
owner = "keycloak";
};
in {
keycloak_db_password = commonSecret;
};
services.keycloak = {
enable = true;
database = {
host = "postgresql.local.${config.networking.domain}";
passwordFile = config.sops.secrets.keycloak_db_password.path;
createLocally = false;
};
settings = {
hostname = "sso.gensokyo.zone";
proxy = "edge";
};
};
}