Klub-RZ/infrastructure
4
0
Fork 0
Code Issues 7 Pull requests Projects Releases Packages Wiki Activity

feat(core01): enable TLS on inventory.rz.ens.wtf and fix secrets perms

Browse source
This commit is contained in:
Raito Bezarius 2022-09-06 01:33:17 +02:00
parent dc971eff71
commit 726bc5af0e
1 changed files with 15 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

15
machines/core-services-01/snipe-it.nix
View file

@ -1,11 +1,26 @@
{ pkgs, config, ... }: { pkgs, config, ... }:
{ {
age.secrets.snipeItAppKey = {
owner = config.services.snipe-it.user;
group = config.services.snipe-it.group;
};
age.secrets.snipeItOidcClientSecret = {
owner = config.services.snipe-it.user;
group = config.services.snipe-it.group;
};
services.snipe-it = { services.snipe-it = {
enable = true; enable = true;
hostName = "inventory.rz.ens.wtf"; hostName = "inventory.rz.ens.wtf";
database.createLocally = true; database.createLocally = true;
appKeyFile = config.age.secrets.snipeItAppKey.path; appKeyFile = config.age.secrets.snipeItAppKey.path;
nginx = {
enableACME = true;
forceSSL = true;
};
config = { config = {
AUTH_METHOD = "oidc"; AUTH_METHOD = "oidc";
OIDC_NAME = "Keycloak"; OIDC_NAME = "Keycloak";