setup keycloak
This commit is contained in:
parent
e69cae2cc2
commit
c7968c0080
3 changed files with 29 additions and 7 deletions
|
@ -147,7 +147,7 @@
|
|||
{
|
||||
hostname = "keycloak";
|
||||
ip = "10.42.42.29";
|
||||
mac = "";
|
||||
mac = "A6:09:1D:A8:81:28";
|
||||
}
|
||||
{
|
||||
hostname = "nuc";
|
||||
|
|
|
@ -2,8 +2,8 @@
|
|||
# your system. Help is available in the configuration.nix(5) man page
|
||||
# and in the NixOS manual (accessible by running ‘nixos-help’).
|
||||
|
||||
{ config, pkgs, ... }:
|
||||
|
||||
{ config, pkgs, lib, ... }:
|
||||
let vs = config.vault-secrets.secrets; in
|
||||
{
|
||||
imports = [ ];
|
||||
|
||||
|
@ -18,5 +18,28 @@
|
|||
# Additional packages
|
||||
environment.systemPackages = with pkgs; [ ];
|
||||
|
||||
networking.firewall.allowedTCPPorts = [ ];
|
||||
networking.firewall.allowedTCPPorts = [
|
||||
config.services.keycloak.settings.http-port
|
||||
];
|
||||
|
||||
environment.noXlibs = lib.mkForce false;
|
||||
|
||||
vault-secrets.secrets.keycloak = { };
|
||||
|
||||
# If loadCredential doesn't work:
|
||||
# https://github.com/NixOS/nixpkgs/issues/157449#issuecomment-1208501368
|
||||
services.keycloak = {
|
||||
enable = true;
|
||||
database = {
|
||||
type = "postgresql";
|
||||
host = "localhost";
|
||||
createLocally = true;
|
||||
passwordFile = "${vs.keycloak}/databasePassword";
|
||||
};
|
||||
settings = {
|
||||
hostname = "id.0x76.dev";
|
||||
proxy = "edge";
|
||||
hostname-strict-backchannel = true;
|
||||
};
|
||||
};
|
||||
}
|
||||
|
|
|
@ -51,13 +51,13 @@ in
|
|||
|
||||
# 0x76.dev
|
||||
virtualHosts."ha.0x76.dev" = proxy "http://home-assistant.olympus:8123/";
|
||||
virtualHosts."zookeeper-dev.0x76.dev" = proxy "http://eevee.olympus:8085/";
|
||||
# virtualHosts."zookeeper-dev.0x76.dev" = proxy "http://eevee.olympus:8085/";
|
||||
virtualHosts."md.0x76.dev" = proxy "http://hedgedoc.olympus:3000/";
|
||||
virtualHosts."git.0x76.dev" = proxy "http://gitea.olympus:3000";
|
||||
virtualHosts."o.0x76.dev" = proxy "http://minio.olympus:9000";
|
||||
virtualHosts."grafana.0x76.dev" = proxy "http://victoriametrics.olympus:2342";
|
||||
virtualHosts."outline.0x76.dev" = proxy "http://outline.olympus:3000";
|
||||
# virtualHosts."mail.0x76.dev" = proxy "http://mailserver.olympus:80";
|
||||
virtualHosts."id.0x76.dev" = proxy "http://keycloak.olympus:80";
|
||||
|
||||
# Redshifts
|
||||
virtualHosts."andreea.redshifts.xyz" = proxy "http://zmeura.olympus:8008";
|
||||
|
@ -104,7 +104,6 @@ in
|
|||
# Kubernetes endpoints
|
||||
virtualHosts."0x76.dev" = k8s_proxy;
|
||||
virtualHosts."drone.0x76.dev" = k8s_proxy;
|
||||
virtualHosts."id.0x76.dev" = k8s_proxy;
|
||||
virtualHosts."msg.0x76.dev" = k8s_proxy;
|
||||
virtualHosts."zookeeper.0x76.dev" = k8s_proxy;
|
||||
virtualHosts."wooloofan.club" = k8s_proxy;
|
||||
|
|
Loading…
Reference in a new issue