danvics/selfhostblocks
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

rename ldap block to lldap

Browse source
This commit is contained in:
ibizaman 2025-07-12 21:27:40 +02:00 committed by Pierre Penninckx
parent 0648b8a13c
commit 13f4064e93
19 changed files with 88 additions and 88 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
README.md
View file

@ -217,8 +217,8 @@ shb.nextcloud = {
apps.ldap = { apps.ldap = {
enable = true; enable = true;
host = "127.0.0.1"; host = "127.0.0.1";
port = config.shb.ldap.ldapPort; port = config.shb.lldap.ldapPort;
dcdomain = config.shb.ldap.dcdomain; dcdomain = config.shb.lldap.dcdomain;
adminPassword.result = config.shb.sops.secrets."nextcloud/ldap/admin_password".result; adminPassword.result = config.shb.sops.secrets."nextcloud/ldap/admin_password".result;
}; };
apps.sso = { apps.sso = {
@ -242,8 +242,8 @@ shb.forgejo = {
ldap = { ldap = {
enable = true; enable = true;
host = "127.0.0.1"; host = "127.0.0.1";
port = config.shb.ldap.ldapPort; port = config.shb.lldap.ldapPort;
dcdomain = config.shb.ldap.dcdomain; dcdomain = config.shb.lldap.dcdomain;
adminPassword.result = config.shb.sops.secrets."nextcloud/ldap/admin_password".result; adminPassword.result = config.shb.sops.secrets."nextcloud/ldap/admin_password".result;
}; };

8
demo/homeassistant/flake.nix
View file

@ -65,7 +65,7 @@
}; };
ldap = { config, ... }: { ldap = { config, ... }: {
shb.ldap = { shb.lldap = {
enable = true; enable = true;
domain = "example.com"; domain = "example.com";
subdomain = "ldap"; subdomain = "ldap";
@ -75,13 +75,13 @@
ldapUserPassword.result = config.shb.sops.secret."lldap/user_password".result; ldapUserPassword.result = config.shb.sops.secret."lldap/user_password".result;
jwtSecret.result = config.shb.sops.secret."lldap/jwt_secret".result; jwtSecret.result = config.shb.sops.secret."lldap/jwt_secret".result;
}; };
shb.sops.secret."lldap/user_password".request = config.shb.ldap.ldapUserPassword.request; shb.sops.secret."lldap/user_password".request = config.shb.lldap.ldapUserPassword.request;
shb.sops.secret."lldap/jwt_secret".request = config.shb.ldap.jwtSecret.request; shb.sops.secret."lldap/jwt_secret".request = config.shb.lldap.jwtSecret.request;
shb.home-assistant.ldap = { shb.home-assistant.ldap = {
enable = true; enable = true;
host = "127.0.0.1"; host = "127.0.0.1";
port = config.shb.ldap.webUIListenPort; port = config.shb.lldap.webUIListenPort;
userGroup = "homeassistant_user"; userGroup = "homeassistant_user";
}; };
}; };

16
demo/nextcloud/flake.nix
View file

@ -46,7 +46,7 @@
}; };
ldap = { config, ... }: { ldap = { config, ... }: {
shb.ldap = { shb.lldap = {
enable = true; enable = true;
domain = "example.com"; domain = "example.com";
subdomain = "ldap"; subdomain = "ldap";
@ -56,14 +56,14 @@
ldapUserPassword.result = config.shb.sops.secret."lldap/user_password".result; ldapUserPassword.result = config.shb.sops.secret."lldap/user_password".result;
jwtSecret.result = config.shb.sops.secret."lldap/jwt_secret".result; jwtSecret.result = config.shb.sops.secret."lldap/jwt_secret".result;
}; };
shb.sops.secret."lldap/user_password".request = config.shb.ldap.ldapUserPassword.request; shb.sops.secret."lldap/user_password".request = config.shb.lldap.ldapUserPassword.request;
shb.sops.secret."lldap/jwt_secret".request = config.shb.ldap.jwtSecret.request; shb.sops.secret."lldap/jwt_secret".request = config.shb.lldap.jwtSecret.request;
shb.nextcloud.apps.ldap = { shb.nextcloud.apps.ldap = {
enable = true; enable = true;
host = "127.0.0.1"; host = "127.0.0.1";
port = config.shb.ldap.ldapPort; port = config.shb.lldap.ldapPort;
dcdomain = config.shb.ldap.dcdomain; dcdomain = config.shb.lldap.dcdomain;
adminName = "admin"; adminName = "admin";
adminPassword.result = config.shb.sops.secret."nextcloud/ldap_admin_password".result; adminPassword.result = config.shb.sops.secret."nextcloud/ldap_admin_password".result;
userGroup = "nextcloud_user"; userGroup = "nextcloud_user";
@ -91,7 +91,7 @@
port = lib.mkForce null; port = lib.mkForce null;
ssl = config.shb.certs.certs.selfsigned.n; ssl = config.shb.certs.certs.selfsigned.n;
}; };
shb.ldap.ssl = config.shb.certs.certs.selfsigned.n; shb.lldap.ssl = config.shb.certs.certs.selfsigned.n;
services.dnsmasq = { services.dnsmasq = {
enable = true; enable = true;
@ -114,9 +114,9 @@
domain = "example.com"; domain = "example.com";
subdomain = "auth"; subdomain = "auth";
ssl = config.shb.certs.certs.selfsigned.n; ssl = config.shb.certs.certs.selfsigned.n;
ldapPort = config.shb.ldap.ldapPort; ldapPort = config.shb.lldap.ldapPort;
ldapHostname = "127.0.0.1"; ldapHostname = "127.0.0.1";
dcdomain = config.shb.ldap.dcdomain; dcdomain = config.shb.lldap.dcdomain;
secrets = { secrets = {
jwtSecret.result = config.shb.sops.secret."authelia/jwt_secret".result; jwtSecret.result = config.shb.sops.secret."authelia/jwt_secret".result;

8
docs/preface.md
View file

@ -38,8 +38,8 @@ shb.nextcloud = {
apps.ldap = { apps.ldap = {
enable = true; enable = true;
host = "127.0.0.1"; host = "127.0.0.1";
port = config.shb.ldap.ldapPort; port = config.shb.lldap.ldapPort;
dcdomain = config.shb.ldap.dcdomain; dcdomain = config.shb.lldap.dcdomain;
adminPassword.result = config.shb.sops.secrets."nextcloud/ldap/admin_password".result; adminPassword.result = config.shb.sops.secrets."nextcloud/ldap/admin_password".result;
}; };
apps.sso = { apps.sso = {
@ -63,8 +63,8 @@ shb.forgejo = {
ldap = { ldap = {
enable = true; enable = true;
host = "127.0.0.1"; host = "127.0.0.1";
port = config.shb.ldap.ldapPort; port = config.shb.lldap.ldapPort;
dcdomain = config.shb.ldap.dcdomain; dcdomain = config.shb.lldap.dcdomain;
adminPassword.result = config.shb.sops.secrets."nextcloud/ldap/admin_password".result; adminPassword.result = config.shb.sops.secrets."nextcloud/ldap/admin_password".result;
}; };

24
docs/usage.md
View file

@ -832,7 +832,7 @@ in
}; };
shb.certs.certs.letsencrypt.${domain}.extraDomains = [ "ldap.${domain}" ]; shb.certs.certs.letsencrypt.${domain}.extraDomains = [ "ldap.${domain}" ];
shb.ldap = { shb.lldap = {
enable = true; enable = true;
inherit domain; inherit domain;
subdomain = "ldap"; subdomain = "ldap";
@ -845,8 +845,8 @@ in
# restrictAccessIPRange = "192.168.50.0/24"; # restrictAccessIPRange = "192.168.50.0/24";
debug = false; debug = false;
}; };
shb.sops.secret."ldap/user_password".request = config.shb.ldap.ldapUserPassword.request; shb.sops.secret."ldap/user_password".request = config.shb.lldap.ldapUserPassword.request;
shb.sops.secret."ldap/jwt_secret".request = config.shb.ldap.jwtSecret.request; shb.sops.secret."ldap/jwt_secret".request = config.shb.lldap.jwtSecret.request;
shb.zfs.datasets."safe/ldap2".path = "/var/lib/private/lldap"; shb.zfs.datasets."safe/ldap2".path = "/var/lib/private/lldap";
@ -873,8 +873,8 @@ in
ssl = config.shb.certs.certs.letsencrypt.${domain}; ssl = config.shb.certs.certs.letsencrypt.${domain};
ldapHostname = "127.0.0.1"; ldapHostname = "127.0.0.1";
ldapPort = config.shb.ldap.ldapPort; ldapPort = config.shb.lldap.ldapPort;
dcdomain = config.shb.ldap.dcdomain; dcdomain = config.shb.lldap.dcdomain;
smtp = { smtp = {
host = "smtp.eu.mailgun.org"; host = "smtp.eu.mailgun.org";
@ -933,8 +933,8 @@ in
ldap = { ldap = {
enable = true; enable = true;
host = "127.0.0.1"; host = "127.0.0.1";
port = config.shb.ldap.ldapPort; port = config.shb.lldap.ldapPort;
dcdomain = config.shb.ldap.dcdomain; dcdomain = config.shb.lldap.dcdomain;
adminPassword.result = config.shb.sops.secret."forgejo/ldap_admin_password".result; adminPassword.result = config.shb.sops.secret."forgejo/ldap_admin_password".result;
}; };
@ -1062,8 +1062,8 @@ in
ldap = { ldap = {
enable = true; enable = true;
host = "127.0.0.1"; host = "127.0.0.1";
port = config.shb.ldap.ldapPort; port = config.shb.lldap.ldapPort;
dcdomain = config.shb.ldap.dcdomain; dcdomain = config.shb.lldap.dcdomain;
adminName = "admin"; adminName = "admin";
adminPassword.result = config.shb.sops.secret."nextcloud/ldap_admin_password".result; adminPassword.result = config.shb.sops.secret."nextcloud/ldap_admin_password".result;
userGroup = "nextcloud_user"; userGroup = "nextcloud_user";
@ -1167,8 +1167,8 @@ in
ldap = { ldap = {
enable = true; enable = true;
host = "127.0.0.1"; host = "127.0.0.1";
port = config.shb.ldap.ldapPort; port = config.shb.lldap.ldapPort;
dcdomain = config.shb.ldap.dcdomain; dcdomain = config.shb.lldap.dcdomain;
adminPassword.result = config.shb.sops.secret."jellyfin/ldap_password".result; adminPassword.result = config.shb.sops.secret."jellyfin/ldap_password".result;
userGroup = "jellyfin_user"; userGroup = "jellyfin_user";
}; };
@ -1223,7 +1223,7 @@ in
ldap = { ldap = {
enable = true; enable = true;
host = "127.0.0.1"; host = "127.0.0.1";
port = config.shb.ldap.webUIListenPort; port = config.shb.lldap.webUIListenPort;
userGroup = "homeassistant_user"; userGroup = "homeassistant_user";
}; };
}; };

4
flake.nix
View file

@ -107,7 +107,7 @@
modules/blocks/authelia.nix modules/blocks/authelia.nix
modules/blocks/davfs.nix modules/blocks/davfs.nix
modules/blocks/hardcodedsecret.nix modules/blocks/hardcodedsecret.nix
modules/blocks/ldap.nix modules/blocks/lldap.nix
modules/blocks/monitoring.nix modules/blocks/monitoring.nix
modules/blocks/nginx.nix modules/blocks/nginx.nix
modules/blocks/postgresql.nix modules/blocks/postgresql.nix
@ -282,7 +282,7 @@
// (vm_test "vaultwarden" ./test/services/vaultwarden.nix) // (vm_test "vaultwarden" ./test/services/vaultwarden.nix)
// (vm_test "authelia" ./test/blocks/authelia.nix) // (vm_test "authelia" ./test/blocks/authelia.nix)
// (vm_test "ldap" ./test/blocks/ldap.nix) // (vm_test "lldap" ./test/blocks/lldap.nix)
// (vm_test "lib" ./test/blocks/lib.nix) // (vm_test "lib" ./test/blocks/lib.nix)
// (vm_test "postgresql" ./test/blocks/postgresql.nix) // (vm_test "postgresql" ./test/blocks/postgresql.nix)
// (vm_test "restic" ./test/blocks/restic.nix) // (vm_test "restic" ./test/blocks/restic.nix)

6
modules/blocks/ldap.nix → modules/blocks/lldap.nix
View file

@ -1,14 +1,14 @@
{ config, pkgs, lib, ... }: { config, pkgs, lib, ... }:
let let
cfg = config.shb.ldap; cfg = config.shb.lldap;
contracts = pkgs.callPackage ../contracts {}; contracts = pkgs.callPackage ../contracts {};
fqdn = "${cfg.subdomain}.${cfg.domain}"; fqdn = "${cfg.subdomain}.${cfg.domain}";
in in
{ {
options.shb.ldap = { options.shb.lldap = {
enable = lib.mkEnableOption "the LDAP service"; enable = lib.mkEnableOption "the LDAP service";
dcdomain = lib.mkOption { dcdomain = lib.mkOption {
@ -95,7 +95,7 @@ in
``` ```
shb.zfs.datasets."ldap" = { shb.zfs.datasets."ldap" = {
poolName = "root"; poolName = "root";
} // config.shb.ldap.mount; } // config.shb.lldap.mount;
``` ```
''; '';
readOnly = true; readOnly = true;

10
modules/contracts/secret/docs/default.md
View file

@ -26,7 +26,7 @@ sops.secrets."ldap/user_password" = {
sopsFile = ./secrets.yaml; sopsFile = ./secrets.yaml;
}; };
shb.ldap.userPassword.result = config.sops.secrets."ldap/user_password".result; shb.lldap.userPassword.result = config.sops.secrets."ldap/user_password".result;
``` ```
The problem this contract intends to fix is how to ensure The problem this contract intends to fix is how to ensure
@ -43,11 +43,11 @@ The configuration then becomes:
```nix ```nix
shb.sops.secrets."ldap/user_password" = { shb.sops.secrets."ldap/user_password" = {
request = config.shb.ldap.userPassword.request; request = config.shb.lldap.userPassword.request;
settings.sopsFile = ./secrets.yaml; settings.sopsFile = ./secrets.yaml;
}; };
shb.ldap.userPassword.result = config.shb.sops.secrets."ldap/user_password".result; shb.lldap.userPassword.result = config.shb.sops.secrets."ldap/user_password".result;
``` ```
The issue is now gone as the responsibility falls The issue is now gone as the responsibility falls
@ -63,9 +63,9 @@ sops.defaultSopsFile = ./secrets.yaml;
Then the snippet above is even more simplified: Then the snippet above is even more simplified:
```nix ```nix
shb.sops.secrets."ldap/user_password".request = config.shb.ldap.userPassword.request; shb.sops.secrets."ldap/user_password".request = config.shb.lldap.userPassword.request;
shb.ldap.userPassword.result = config.shb.sops.secrets."ldap/user_password".result; shb.lldap.userPassword.result = config.shb.sops.secrets."ldap/user_password".result;
``` ```
## Contract Reference {#contract-secret-options} ## Contract Reference {#contract-secret-options}

18
modules/services/forgejo/docs/default.md
View file

@ -102,7 +102,7 @@ We will use the LDAP block provided by Self Host Blocks
to setup a [LLDAP](https://github.com/lldap/lldap) service. to setup a [LLDAP](https://github.com/lldap/lldap) service.
```nix ```nix
shb.ldap = { shb.lldap = {
enable = true; enable = true;
domain = "example.com"; domain = "example.com";
subdomain = "ldap"; subdomain = "ldap";
@ -116,8 +116,8 @@ shb.ldap = {
shb.certs.certs.letsencrypt."example.com".extraDomains = [ "ldap.example.com" ]; shb.certs.certs.letsencrypt."example.com".extraDomains = [ "ldap.example.com" ];
shb.sops.secrets."ldap/userPassword".request = config.shb.ldap.userPassword.request; shb.sops.secrets."ldap/userPassword".request = config.shb.lldap.userPassword.request;
shb.sops.secrets."ldap/jwtSecret".request = config.shb.ldap.jwtSecret.request; shb.sops.secrets."ldap/jwtSecret".request = config.shb.lldap.jwtSecret.request;
``` ```
We also need to configure the `forgejo` service We also need to configure the `forgejo` service
@ -127,8 +127,8 @@ to talk to the LDAP server we just defined:
shb.forgejo.ldap shb.forgejo.ldap
enable = true; enable = true;
host = "127.0.0.1"; host = "127.0.0.1";
port = config.shb.ldap.ldapPort; port = config.shb.lldap.ldapPort;
dcdomain = config.shb.ldap.dcdomain; dcdomain = config.shb.lldap.dcdomain;
adminPassword.result = config.shb.sops.secrets."forgejo/ldap/adminPassword".result adminPassword.result = config.shb.sops.secrets."forgejo/ldap/adminPassword".result
}; };
@ -139,7 +139,7 @@ shb.sops.secrets."forgejo/ldap/adminPassword" = {
``` ```
The `shb.forgejo.ldap.adminPasswordFile` must be the same The `shb.forgejo.ldap.adminPasswordFile` must be the same
as the `shb.ldap.ldapUserPasswordFile` which is achieved as the `shb.lldap.ldapUserPasswordFile` which is achieved
with the `key` option. with the `key` option.
The other secrets can be randomly generated with The other secrets can be randomly generated with
`nix run nixpkgs#openssl -- rand -hex 64`. `nix run nixpkgs#openssl -- rand -hex 64`.
@ -169,8 +169,8 @@ shb.authelia = {
ssl = config.shb.certs.certs.letsencrypt."example.com"; ssl = config.shb.certs.certs.letsencrypt."example.com";
ldapHostname = "127.0.0.1"; ldapHostname = "127.0.0.1";
ldapPort = config.shb.ldap.ldapPort; ldapPort = config.shb.lldap.ldapPort;
dcdomain = config.shb.ldap.dcdomain; dcdomain = config.shb.lldap.dcdomain;
secrets = { secrets = {
jwtSecret.result = config.shb.sops.secrets."authelia/jwt_secret".result; jwtSecret.result = config.shb.sops.secrets."authelia/jwt_secret".result;
@ -194,7 +194,7 @@ shb.sops.secrets."authelia/smtp_password".request = config.shb.authelia.smtp.pas
``` ```
The `shb.authelia.secrets.ldapAdminPasswordFile` must be the same The `shb.authelia.secrets.ldapAdminPasswordFile` must be the same
as the `shb.ldap.ldapUserPasswordFile` defined in the previous section. as the `shb.lldap.ldapUserPasswordFile` defined in the previous section.
The other secrets can be randomly generated The other secrets can be randomly generated
with `nix run nixpkgs#openssl -- rand -hex 64`. with `nix run nixpkgs#openssl -- rand -hex 64`.

8
modules/services/home-assistant/docs/default.md
View file

@ -120,7 +120,7 @@ to setup a [LLDAP](https://github.com/lldap/lldap) service.
First, setup the global ldap block if not done yet: First, setup the global ldap block if not done yet:
```nix ```nix
shb.ldap = { shb.lldap = {
enable = true; enable = true;
domain = "example.com"; domain = "example.com";
subdomain = "ldap"; subdomain = "ldap";
@ -134,8 +134,8 @@ shb.ldap = {
shb.certs.certs.letsencrypt."example.com".extraDomains = [ "ldap.example.com" ]; shb.certs.certs.letsencrypt."example.com".extraDomains = [ "ldap.example.com" ];
shb.sops.secrets."ldap/userPassword".request = config.shb.ldap.userPassword.request; shb.sops.secrets."ldap/userPassword".request = config.shb.lldap.userPassword.request;
shb.sops.secrets."ldap/jwtSecret".request = config.shb.ldap.jwtSecret.request; shb.sops.secrets."ldap/jwtSecret".request = config.shb.lldap.jwtSecret.request;
``` ```
We then need to configure the `home-assistant` service We then need to configure the `home-assistant` service
@ -145,7 +145,7 @@ to talk to the LDAP server we just defined:
shb.home-assistant.ldap shb.home-assistant.ldap
enable = true; enable = true;
host = "127.0.0.1"; host = "127.0.0.1";
port = config.shb.ldap.webUIListenPort; port = config.shb.lldap.webUIListenPort;
userGroup = "homeassistant_user"; userGroup = "homeassistant_user";
}; };
``` ```

16
modules/services/nextcloud-server/docs/default.md
View file

@ -154,7 +154,7 @@ We will use the LDAP block provided by Self Host Blocks to setup a
If did already configure this for another service, you can skip this snippet. If did already configure this for another service, you can skip this snippet.
```nix ```nix
shb.ldap = { shb.lldap = {
enable = true; enable = true;
domain = "example.com"; domain = "example.com";
subdomain = "ldap"; subdomain = "ldap";
@ -168,8 +168,8 @@ shb.ldap = {
shb.certs.certs.letsencrypt."example.com".extraDomains = [ "ldap.example.com" ]; shb.certs.certs.letsencrypt."example.com".extraDomains = [ "ldap.example.com" ];
shb.sops.secrets."ldap/userPassword".request = config.shb.ldap.userPassword.request; shb.sops.secrets."ldap/userPassword".request = config.shb.lldap.userPassword.request;
shb.sops.secrets."ldap/jwtSecret".request = config.shb.ldap.jwtSecret.request; shb.sops.secrets."ldap/jwtSecret".request = config.shb.lldap.jwtSecret.request;
``` ```
On the `nextcloud` module side, we need to configure it to talk to the LDAP server we On the `nextcloud` module side, we need to configure it to talk to the LDAP server we
@ -179,8 +179,8 @@ just defined:
shb.nextcloud.apps.ldap = { shb.nextcloud.apps.ldap = {
enable = true; enable = true;
host = "127.0.0.1"; host = "127.0.0.1";
port = config.shb.ldap.ldapPort; port = config.shb.lldap.ldapPort;
dcdomain = config.shb.ldap.dcdomain; dcdomain = config.shb.lldap.dcdomain;
adminName = "admin"; adminName = "admin";
adminPassword.result = config.shb.sops.secrets."nextcloud/ldap/adminPassword".result adminPassword.result = config.shb.sops.secrets."nextcloud/ldap/adminPassword".result
userGroup = "nextcloud_user"; userGroup = "nextcloud_user";
@ -192,7 +192,7 @@ shb.sops.secrets."nextcloud/ldap/adminPassword" = {
}; };
``` ```
The LDAP admin password must be shared between `shb.ldap` and `shb.nextcloud`, The LDAP admin password must be shared between `shb.lldap` and `shb.nextcloud`,
to do that with SOPS we use the `key` option so that both to do that with SOPS we use the `key` option so that both
`sops.secrets."ldap/userPassword"` `sops.secrets."ldap/userPassword"`
and `sops.secrets."nextcloud/ldapUserPassword"` and `sops.secrets."nextcloud/ldapUserPassword"`
@ -230,8 +230,8 @@ shb.authelia = {
ssl = config.shb.certs.certs.letsencrypt."example.com"; ssl = config.shb.certs.certs.letsencrypt."example.com";
ldapHostname = "127.0.0.1"; ldapHostname = "127.0.0.1";
ldapPort = config.shb.ldap.ldapPort; ldapPort = config.shb.lldap.ldapPort;
dcdomain = config.shb.ldap.dcdomain; dcdomain = config.shb.lldap.dcdomain;
smtp = { smtp = {
host = "smtp.eu.mailgun.org"; host = "smtp.eu.mailgun.org";

14
test/blocks/authelia.nix
View file

@ -14,7 +14,7 @@ in
(pkgs'.path + "/nixos/modules/profiles/qemu-guest.nix") (pkgs'.path + "/nixos/modules/profiles/qemu-guest.nix")
../../modules/blocks/authelia.nix ../../modules/blocks/authelia.nix
../../modules/blocks/hardcodedsecret.nix ../../modules/blocks/hardcodedsecret.nix
../../modules/blocks/ldap.nix ../../modules/blocks/lldap.nix
../../modules/blocks/postgresql.nix ../../modules/blocks/postgresql.nix
]; ];
@ -28,7 +28,7 @@ in
]; ];
}; };
shb.ldap = { shb.lldap = {
enable = true; enable = true;
dcdomain = "dc=example,dc=com"; dcdomain = "dc=example,dc=com";
subdomain = "ldap"; subdomain = "ldap";
@ -38,11 +38,11 @@ in
}; };
shb.hardcodedsecret.ldapUserPassword = { shb.hardcodedsecret.ldapUserPassword = {
request = config.shb.ldap.ldapUserPassword.request; request = config.shb.lldap.ldapUserPassword.request;
settings.content = ldapAdminPassword; settings.content = ldapAdminPassword;
}; };
shb.hardcodedsecret.jwtSecret = { shb.hardcodedsecret.jwtSecret = {
request = config.shb.ldap.jwtSecret.request; request = config.shb.lldap.jwtSecret.request;
settings.content = "jwtsecret"; settings.content = "jwtsecret";
}; };
@ -50,9 +50,9 @@ in
enable = true; enable = true;
subdomain = "authelia"; subdomain = "authelia";
domain = "machine.com"; domain = "machine.com";
ldapHostname = "${config.shb.ldap.subdomain}.${config.shb.ldap.domain}"; ldapHostname = "${config.shb.lldap.subdomain}.${config.shb.lldap.domain}";
ldapPort = config.shb.ldap.ldapPort; ldapPort = config.shb.lldap.ldapPort;
dcdomain = config.shb.ldap.dcdomain; dcdomain = config.shb.lldap.dcdomain;
secrets = { secrets = {
jwtSecret.result = config.shb.hardcodedsecret.autheliaJwtSecret.result; jwtSecret.result = config.shb.hardcodedsecret.autheliaJwtSecret.result;
ldapAdminPassword.result = config.shb.hardcodedsecret.ldapAdminPassword.result; ldapAdminPassword.result = config.shb.hardcodedsecret.ldapAdminPassword.result;

8
test/blocks/ldap.nix → test/blocks/lldap.nix
View file

@ -18,10 +18,10 @@ in
}; };
} }
../../modules/blocks/hardcodedsecret.nix ../../modules/blocks/hardcodedsecret.nix
../../modules/blocks/ldap.nix ../../modules/blocks/lldap.nix
]; ];
shb.ldap = { shb.lldap = {
enable = true; enable = true;
dcdomain = "dc=example,dc=com"; dcdomain = "dc=example,dc=com";
subdomain = "ldap"; subdomain = "ldap";
@ -31,11 +31,11 @@ in
debug = true; debug = true;
}; };
shb.hardcodedsecret.ldapUserPassword = { shb.hardcodedsecret.ldapUserPassword = {
request = config.shb.ldap.ldapUserPassword.request; request = config.shb.lldap.ldapUserPassword.request;
settings.content = password; settings.content = password;
}; };
shb.hardcodedsecret.jwtSecret = { shb.hardcodedsecret.jwtSecret = {
request = config.shb.ldap.jwtSecret.request; request = config.shb.lldap.jwtSecret.request;
settings.content = "jwtSecret"; settings.content = "jwtSecret";
}; };

12
test/common.nix
View file

@ -376,7 +376,7 @@ in
ldap = { config, pkgs, ... }: { ldap = { config, pkgs, ... }: {
imports = [ imports = [
../modules/blocks/ldap.nix ../modules/blocks/lldap.nix
]; ];
networking.hosts = { networking.hosts = {
@ -384,15 +384,15 @@ in
}; };
shb.hardcodedsecret.ldapUserPassword = { shb.hardcodedsecret.ldapUserPassword = {
request = config.shb.ldap.ldapUserPassword.request; request = config.shb.lldap.ldapUserPassword.request;
settings.content = "ldapUserPassword"; settings.content = "ldapUserPassword";
}; };
shb.hardcodedsecret.jwtSecret = { shb.hardcodedsecret.jwtSecret = {
request = config.shb.ldap.jwtSecret.request; request = config.shb.lldap.jwtSecret.request;
settings.content = "jwtSecrets"; settings.content = "jwtSecrets";
}; };
shb.ldap = { shb.lldap = {
enable = true; enable = true;
inherit (config.test) domain; inherit (config.test) domain;
subdomain = "ldap"; subdomain = "ldap";
@ -420,8 +420,8 @@ in
ssl = config.shb.certs.certs.selfsigned.n; ssl = config.shb.certs.certs.selfsigned.n;
ldapHostname = "127.0.0.1"; ldapHostname = "127.0.0.1";
ldapPort = config.shb.ldap.ldapPort; ldapPort = config.shb.lldap.ldapPort;
dcdomain = config.shb.ldap.dcdomain; dcdomain = config.shb.lldap.dcdomain;
secrets = { secrets = {
jwtSecret.result = config.shb.hardcodedsecret.autheliaJwtSecret.result; jwtSecret.result = config.shb.hardcodedsecret.autheliaJwtSecret.result;

4
test/services/forgejo.nix
View file

@ -115,8 +115,8 @@ let
ldap = { ldap = {
enable = true; enable = true;
host = "127.0.0.1"; host = "127.0.0.1";
port = config.shb.ldap.ldapPort; port = config.shb.lldap.ldapPort;
dcdomain = config.shb.ldap.dcdomain; dcdomain = config.shb.lldap.dcdomain;
adminPassword.result = config.shb.hardcodedsecret.forgejoLdapUserPassword.result; adminPassword.result = config.shb.hardcodedsecret.forgejoLdapUserPassword.result;
}; };
}; };

2
test/services/home-assistant.nix
View file

@ -82,7 +82,7 @@ let
ldap = { ldap = {
enable = true; enable = true;
host = "127.0.0.1"; host = "127.0.0.1";
port = config.shb.ldap.webUIListenPort; port = config.shb.lldap.webUIListenPort;
userGroup = "homeassistant_user"; userGroup = "homeassistant_user";
}; };
}; };

4
test/services/jellyfin.nix
View file

@ -119,8 +119,8 @@ let
ldap = { ldap = {
enable = true; enable = true;
host = "127.0.0.1"; host = "127.0.0.1";
port = config.shb.ldap.ldapPort; port = config.shb.lldap.ldapPort;
dcdomain = config.shb.ldap.dcdomain; dcdomain = config.shb.lldap.dcdomain;
adminPassword.result = config.shb.hardcodedsecret.jellyfinLdapUserPassword.result; adminPassword.result = config.shb.hardcodedsecret.jellyfinLdapUserPassword.result;
}; };
}; };

4
test/services/nextcloud.nix
View file

@ -185,8 +185,8 @@ let
apps.ldap = { apps.ldap = {
enable = true; enable = true;
host = "127.0.0.1"; host = "127.0.0.1";
port = config.shb.ldap.ldapPort; port = config.shb.lldap.ldapPort;
dcdomain = config.shb.ldap.dcdomain; dcdomain = config.shb.lldap.dcdomain;
adminName = "admin"; adminName = "admin";
adminPassword.result = config.shb.hardcodedsecret.nextcloudLdapUserPassword.result; adminPassword.result = config.shb.hardcodedsecret.nextcloudLdapUserPassword.result;
userGroup = "nextcloud_user"; userGroup = "nextcloud_user";

2
test/services/vaultwarden.nix
View file

@ -76,7 +76,7 @@ let
# ldap = { config, ... }: { # ldap = { config, ... }: {
# # shb.vaultwarden = { # # shb.vaultwarden = {
# # ldapHostname = "127.0.0.1"; # # ldapHostname = "127.0.0.1";
# # ldapPort = config.shb.ldap.webUIListenPort; # # ldapPort = config.shb.lldap.webUIListenPort;
# # }; # # };
# }; # };