setup keycloak
This commit is contained in:
parent
e69cae2cc2
commit
c7968c0080
3 changed files with 29 additions and 7 deletions
|
@ -147,7 +147,7 @@
|
||||||
{
|
{
|
||||||
hostname = "keycloak";
|
hostname = "keycloak";
|
||||||
ip = "10.42.42.29";
|
ip = "10.42.42.29";
|
||||||
mac = "";
|
mac = "A6:09:1D:A8:81:28";
|
||||||
}
|
}
|
||||||
{
|
{
|
||||||
hostname = "nuc";
|
hostname = "nuc";
|
||||||
|
|
|
@ -2,8 +2,8 @@
|
||||||
# your system. Help is available in the configuration.nix(5) man page
|
# your system. Help is available in the configuration.nix(5) man page
|
||||||
# and in the NixOS manual (accessible by running ‘nixos-help’).
|
# and in the NixOS manual (accessible by running ‘nixos-help’).
|
||||||
|
|
||||||
{ config, pkgs, ... }:
|
{ config, pkgs, lib, ... }:
|
||||||
|
let vs = config.vault-secrets.secrets; in
|
||||||
{
|
{
|
||||||
imports = [ ];
|
imports = [ ];
|
||||||
|
|
||||||
|
@ -18,5 +18,28 @@
|
||||||
# Additional packages
|
# Additional packages
|
||||||
environment.systemPackages = with pkgs; [ ];
|
environment.systemPackages = with pkgs; [ ];
|
||||||
|
|
||||||
networking.firewall.allowedTCPPorts = [ ];
|
networking.firewall.allowedTCPPorts = [
|
||||||
|
config.services.keycloak.settings.http-port
|
||||||
|
];
|
||||||
|
|
||||||
|
environment.noXlibs = lib.mkForce false;
|
||||||
|
|
||||||
|
vault-secrets.secrets.keycloak = { };
|
||||||
|
|
||||||
|
# If loadCredential doesn't work:
|
||||||
|
# https://github.com/NixOS/nixpkgs/issues/157449#issuecomment-1208501368
|
||||||
|
services.keycloak = {
|
||||||
|
enable = true;
|
||||||
|
database = {
|
||||||
|
type = "postgresql";
|
||||||
|
host = "localhost";
|
||||||
|
createLocally = true;
|
||||||
|
passwordFile = "${vs.keycloak}/databasePassword";
|
||||||
|
};
|
||||||
|
settings = {
|
||||||
|
hostname = "id.0x76.dev";
|
||||||
|
proxy = "edge";
|
||||||
|
hostname-strict-backchannel = true;
|
||||||
|
};
|
||||||
|
};
|
||||||
}
|
}
|
||||||
|
|
|
@ -51,13 +51,13 @@ in
|
||||||
|
|
||||||
# 0x76.dev
|
# 0x76.dev
|
||||||
virtualHosts."ha.0x76.dev" = proxy "http://home-assistant.olympus:8123/";
|
virtualHosts."ha.0x76.dev" = proxy "http://home-assistant.olympus:8123/";
|
||||||
virtualHosts."zookeeper-dev.0x76.dev" = proxy "http://eevee.olympus:8085/";
|
# virtualHosts."zookeeper-dev.0x76.dev" = proxy "http://eevee.olympus:8085/";
|
||||||
virtualHosts."md.0x76.dev" = proxy "http://hedgedoc.olympus:3000/";
|
virtualHosts."md.0x76.dev" = proxy "http://hedgedoc.olympus:3000/";
|
||||||
virtualHosts."git.0x76.dev" = proxy "http://gitea.olympus:3000";
|
virtualHosts."git.0x76.dev" = proxy "http://gitea.olympus:3000";
|
||||||
virtualHosts."o.0x76.dev" = proxy "http://minio.olympus:9000";
|
virtualHosts."o.0x76.dev" = proxy "http://minio.olympus:9000";
|
||||||
virtualHosts."grafana.0x76.dev" = proxy "http://victoriametrics.olympus:2342";
|
virtualHosts."grafana.0x76.dev" = proxy "http://victoriametrics.olympus:2342";
|
||||||
virtualHosts."outline.0x76.dev" = proxy "http://outline.olympus:3000";
|
virtualHosts."outline.0x76.dev" = proxy "http://outline.olympus:3000";
|
||||||
# virtualHosts."mail.0x76.dev" = proxy "http://mailserver.olympus:80";
|
virtualHosts."id.0x76.dev" = proxy "http://keycloak.olympus:80";
|
||||||
|
|
||||||
# Redshifts
|
# Redshifts
|
||||||
virtualHosts."andreea.redshifts.xyz" = proxy "http://zmeura.olympus:8008";
|
virtualHosts."andreea.redshifts.xyz" = proxy "http://zmeura.olympus:8008";
|
||||||
|
@ -104,7 +104,6 @@ in
|
||||||
# Kubernetes endpoints
|
# Kubernetes endpoints
|
||||||
virtualHosts."0x76.dev" = k8s_proxy;
|
virtualHosts."0x76.dev" = k8s_proxy;
|
||||||
virtualHosts."drone.0x76.dev" = k8s_proxy;
|
virtualHosts."drone.0x76.dev" = k8s_proxy;
|
||||||
virtualHosts."id.0x76.dev" = k8s_proxy;
|
|
||||||
virtualHosts."msg.0x76.dev" = k8s_proxy;
|
virtualHosts."msg.0x76.dev" = k8s_proxy;
|
||||||
virtualHosts."zookeeper.0x76.dev" = k8s_proxy;
|
virtualHosts."zookeeper.0x76.dev" = k8s_proxy;
|
||||||
virtualHosts."wooloofan.club" = k8s_proxy;
|
virtualHosts."wooloofan.club" = k8s_proxy;
|
||||||
|
|
Loading…
Reference in a new issue