feat(radius): add AP secret for RADIUS auth requests

Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
2024-08-31 22:38:35 +02:00 · 2024-08-31 22:38:35 +02:00 · 3ca3ff8939
commit 3ca3ff8939
parent 16f47ce227
3 changed files with 40 additions and 2 deletions
--- a/machines/vault01/k-radius/default.nix
+++ b/machines/vault01/k-radius/default.nix
@ -6,6 +6,13 @@
  services.k-radius = {
    enable = true;

+    radiusClients = {
+      ap = {
+        ipaddr = "0.0.0.0/0";
+        secret = config.age.secrets."radius-ap-radius-secret_file".path;
+      };
+    };
+
    settings = {
      # URL to the Kanidm server
      uri = "https://sso.dgnum.eu";
@ -50,8 +57,6 @@
        "key"
      ]
    );
-
-    radiusClients = { };
  };

  age-secrets.autoMatch = [ "radius" ];