mirrors_public/oddlama_nix-config
1
1
Fork 1
mirror of https://github.com/oddlama/nix-config.git synced 2025-10-11 07:10:39 +02:00
Code Activity

chore: generate and use new secrets

Browse source
This commit is contained in:
oddlama 2023-08-27 01:19:03 +02:00
parent 7c48e51320
commit 0b8de70330
No known key found for this signature in database
GPG key ID: 14EFE510775FE39A
5 changed files with 36 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

6
hosts/sentinel/oauth2.nix
View file

@ -46,7 +46,6 @@
redeemURL = "https://${config.networking.providedDomains.kanidm}/oauth2/token";
validateURL = "https://${config.networking.providedDomains.kanidm}/oauth2/openid/${clientId}/userinfo";
clientID = clientId;
keyFile = config.age.secrets.oauth2-cookie-secret.path;
email.domains = ["*"];
extraConfig = {
@ -55,4 +54,9 @@
#skip-provider-button = true;
};
};
systemd.services.oauth2_proxy.serviceConfig.EnvironmentFile = [
config.age.secrets.oauth2-cookie-secret.path
config.age.secrets.oauth2-client-secret.path
];
}