mirrors_public/oddlama_nix-config
1
1
Fork 1
mirror of https://github.com/oddlama/nix-config.git synced 2025-10-11 07:10:39 +02:00
Code Activity

refactor: get rid of providedDomains in favor of globals

Browse source
This commit is contained in:
oddlama 2024-06-02 16:59:14 +02:00
parent b6cd74c732
commit 68b12b865c
No known key found for this signature in database
GPG key ID: 14EFE510775FE39A
31 changed files with 103 additions and 107 deletions
Download patch file Download diff file Expand all files Collapse all files

2
hosts/sentinel/coturn.nix
View file

@ -38,7 +38,7 @@ in {
to = config.services.coturn.max-port;
}
];
networking.providedDomains.coturn = coturnDomain;
globals.services.coturn.domain = coturnDomain;
services.coturn = {
enable = true;

5
hosts/sentinel/default.nix
View file

@ -1,5 +1,6 @@
{
config,
globals,
pkgs,
...
}: {
@ -44,12 +45,12 @@
};
# Connect safely via wireguard to skip authentication
networking.hosts.${config.wireguard.proxy-sentinel.ipv4} = [config.networking.providedDomains.influxdb];
networking.hosts.${config.wireguard.proxy-sentinel.ipv4} = [globals.services.influxdb.domain];
meta.telegraf = {
enable = true;
scrapeSensors = false;
influxdb2 = {
domain = config.networking.providedDomains.influxdb;
inherit (globals.services.influxdb) domain;
organization = "machines";
bucket = "telegraf";
node = "sire-influxdb";

9
hosts/sentinel/oauth2.nix
View file

@ -1,5 +1,6 @@
{
config,
globals,
nodes,
...
}: {
@ -40,14 +41,14 @@
in {
provider = "oidc";
scope = "openid email";
loginURL = "https://${config.networking.providedDomains.kanidm}/ui/oauth2";
redeemURL = "https://${config.networking.providedDomains.kanidm}/oauth2/token";
validateURL = "https://${config.networking.providedDomains.kanidm}/oauth2/openid/${clientId}/userinfo";
loginURL = "https://${globals.services.kanidm.domain}/ui/oauth2";
redeemURL = "https://${globals.services.kanidm.domain}/oauth2/token";
validateURL = "https://${globals.services.kanidm.domain}/oauth2/openid/${clientId}/userinfo";
clientID = clientId;
email.domains = ["*"];
extraConfig = {
oidc-issuer-url = "https://${config.networking.providedDomains.kanidm}/oauth2/openid/${clientId}";
oidc-issuer-url = "https://${globals.services.kanidm.domain}/oauth2/openid/${clientId}";
provider-display-name = "Kanidm";
#skip-provider-button = true;
};