docs: remove misleading comment
This commit is contained in:
parent
116dc41d6f
commit
2672101545
3 changed files with 22 additions and 21 deletions
|
|
@ -83,9 +83,8 @@ in
|
||||||
enable = lib.mkEnableOption "SSO integration.";
|
enable = lib.mkEnableOption "SSO integration.";
|
||||||
|
|
||||||
authEndpoint = lib.mkOption {
|
authEndpoint = lib.mkOption {
|
||||||
type = lib.types.nullOr lib.types.str;
|
type = lib.types.str;
|
||||||
default = null;
|
description = "Endpoint to the SSO provider.";
|
||||||
description = "Endpoint to the SSO provider. Leave null to not have SSO configured.";
|
|
||||||
example = "https://authelia.example.com";
|
example = "https://authelia.example.com";
|
||||||
};
|
};
|
||||||
|
|
||||||
|
|
|
||||||
|
|
@ -101,9 +101,8 @@ in
|
||||||
enable = lib.mkEnableOption "SSO integration.";
|
enable = lib.mkEnableOption "SSO integration.";
|
||||||
|
|
||||||
authEndpoint = lib.mkOption {
|
authEndpoint = lib.mkOption {
|
||||||
type = lib.types.nullOr lib.types.str;
|
type = lib.types.str;
|
||||||
default = null;
|
description = "Endpoint to the SSO provider.";
|
||||||
description = "Endpoint to the SSO provider. Leave null to not have SSO configured.";
|
|
||||||
example = "https://authelia.example.com";
|
example = "https://authelia.example.com";
|
||||||
};
|
};
|
||||||
|
|
||||||
|
|
|
||||||
|
|
@ -100,9 +100,8 @@ in
|
||||||
enable = lib.mkEnableOption "SSO integration.";
|
enable = lib.mkEnableOption "SSO integration.";
|
||||||
|
|
||||||
authEndpoint = lib.mkOption {
|
authEndpoint = lib.mkOption {
|
||||||
type = lib.types.nullOr lib.types.str;
|
type = lib.types.str;
|
||||||
default = null;
|
description = "Endpoint to the SSO provider.";
|
||||||
description = "Endpoint to the SSO provider. Leave null to not have SSO configured.";
|
|
||||||
example = "https://authelia.example.com";
|
example = "https://authelia.example.com";
|
||||||
};
|
};
|
||||||
|
|
||||||
|
|
@ -174,19 +173,23 @@ in
|
||||||
};
|
};
|
||||||
|
|
||||||
shb.nginx.vhosts = [
|
shb.nginx.vhosts = [
|
||||||
{
|
(
|
||||||
inherit (cfg) subdomain domain ssl;
|
{
|
||||||
inherit (cfg.sso) authEndpoint;
|
inherit (cfg) subdomain domain ssl;
|
||||||
|
|
||||||
upstream = "http://127.0.0.1:${toString cfg.port}";
|
upstream = "http://127.0.0.1:${toString cfg.port}";
|
||||||
autheliaRules = lib.optionals (cfg.sso.enable) [
|
autheliaRules = lib.optionals (cfg.sso.enable) [
|
||||||
{
|
{
|
||||||
domain = "${cfg.subdomain}.${cfg.domain}";
|
domain = "${cfg.subdomain}.${cfg.domain}";
|
||||||
policy = cfg.sso.authorization_policy;
|
policy = cfg.sso.authorization_policy;
|
||||||
subject = [ "group:${cfg.ldap.userGroup}" ];
|
subject = [ "group:${cfg.ldap.userGroup}" ];
|
||||||
}
|
}
|
||||||
];
|
];
|
||||||
}
|
}
|
||||||
|
// lib.optionalAttrs cfg.sso.enable {
|
||||||
|
inherit (cfg.sso) authEndpoint;
|
||||||
|
}
|
||||||
|
)
|
||||||
];
|
];
|
||||||
|
|
||||||
services.prometheus.scrapeConfigs = [
|
services.prometheus.scrapeConfigs = [
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue