1
1
Fork 1
mirror of https://github.com/oddlama/nix-config.git synced 2025-10-10 14:50:40 +02:00

feat(kanidm): run provision script and secret manipulator

This commit is contained in:
oddlama 2023-08-23 02:00:09 +02:00
parent 6063da387b
commit 31602de07d
No known key found for this signature in database
GPG key ID: 14EFE510775FE39A
2 changed files with 86 additions and 6 deletions

View file

@ -142,8 +142,21 @@ openssl req -x509 -newkey rsa:4096 -sha256 -days 3650 -nodes \
groups.grafana-access = {};
groups.grafana-server-admins = {};
groups.grafana-admins = {};
groups.grafana-editors = {};
systems.oauth2.grafana = {
displayName = "Grafana";
originUrl = "https://grafana.${personalDomain}";
basicSecretFile = pkgs.writeText "bs" "verygoodsecret";
scopeMaps = {
grafana-access = ["openid" "email" "profile"];
};
supplementaryScopeMaps = {
grafana-server-admins = ["server_admin"];
grafana-admins = ["admin"];
grafana-editors = ["editor"];
};
};
};
}