gensokyo-zone/infrastructure
1
0
Fork 0
mirror of https://github.com/gensokyo-zone/infrastructure.git synced 2026-02-09 12:29:19 -08:00
Code Issues Projects Releases Packages Wiki Activity Actions

chore(idp): ldap ssl proxy

Browse source
This commit is contained in:
arcnmx 2024-03-13 15:36:12 -07:00
parent e7ed4ee5ac
commit 926290306a
4 changed files with 137 additions and 70 deletions
Download patch file Download diff file Expand all files Collapse all files

5
nixos/k8s.nix
View file

@ -4,10 +4,11 @@
lib,
...
}: let
inherit (inputs.self.lib.lib) domain;
inherit (lib.modules) mkForce;
inherit (lib.strings) escapeShellArgs;
kubeMasterIP = "10.1.1.173";
kubeMasterHostname = "k8s.gensokyo.zone";
kubeMasterHostname = "k8s.${domain}";
kubeMasterAPIServerPort = 6443;
in {
# packages for administration tasks
@ -42,7 +43,7 @@ in {
extraOpts = escapeShellArgs [
"--service-node-port-range=1-65535"
/*
"--oidc-issuer-url=https://dex.gensokyo.zone:32000"
"--oidc-issuer-url=https://dex.${domain}:32000"
"--oidc-client-id=kuwubernetes"
"--oidc-ca-file=/etc/dex-ssl/ca.pem"
"--oidc-username-claim=email"