danvics/selfhostblocks
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

fix jellyfin SSO plugin

Browse source
This commit is contained in:
ibizaman 2025-04-09 21:21:51 +02:00 committed by Pierre Penninckx
parent d912a9d3fa
commit ad33980d9a
1 changed files with 12 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

17
modules/services/jellyfin.nix
View file

@ -311,7 +311,7 @@ in
<UseStartTls>false</UseStartTls> <UseStartTls>false</UseStartTls>
<SkipSslVerify>false</SkipSslVerify> <SkipSslVerify>false</SkipSslVerify>
<LdapBindUser>uid=admin,ou=people,${cfg.ldap.dcdomain}</LdapBindUser> <LdapBindUser>uid=admin,ou=people,${cfg.ldap.dcdomain}</LdapBindUser>
<LdapBindPassword>%LDAP_PASSWORD%</LdapBindPassword> <LdapBindPassword>%SECRET_LDAP_PASSWORD%</LdapBindPassword>
<LdapBaseDn>ou=people,${cfg.ldap.dcdomain}</LdapBaseDn> <LdapBaseDn>ou=people,${cfg.ldap.dcdomain}</LdapBaseDn>
<LdapSearchFilter>(memberof=cn=${cfg.ldap.userGroup},ou=groups,${cfg.ldap.dcdomain})</LdapSearchFilter> <LdapSearchFilter>(memberof=cn=${cfg.ldap.userGroup},ou=groups,${cfg.ldap.dcdomain})</LdapSearchFilter>
<LdapAdminBaseDn>ou=people,${cfg.ldap.dcdomain}</LdapAdminBaseDn> <LdapAdminBaseDn>ou=people,${cfg.ldap.dcdomain}</LdapAdminBaseDn>
@ -344,7 +344,7 @@ in
<PluginConfiguration> <PluginConfiguration>
<OidEndpoint>${cfg.sso.endpoint}</OidEndpoint> <OidEndpoint>${cfg.sso.endpoint}</OidEndpoint>
<OidClientId>${cfg.sso.clientID}</OidClientId> <OidClientId>${cfg.sso.clientID}</OidClientId>
<OidSecret>%SSO_SECRET%</OidSecret> <OidSecret>%SECRET_SSO_SECRET%</OidSecret>
<Enabled>true</Enabled> <Enabled>true</Enabled>
<EnableAuthorization>true</EnableAuthorization> <EnableAuthorization>true</EnableAuthorization>
<EnableAllFolders>true</EnableAllFolders> <EnableAllFolders>true</EnableAllFolders>
@ -420,7 +420,7 @@ in
resultPath = "/var/lib/jellyfin/plugins/configurations/LDAP-Auth.xml"; resultPath = "/var/lib/jellyfin/plugins/configurations/LDAP-Auth.xml";
replacements = [ replacements = [
{ {
name = [ "%LDAP_PASSWORD%" ]; name = [ "LDAP_PASSWORD" ];
source = cfg.ldap.adminPassword.result.path; source = cfg.ldap.adminPassword.result.path;
} }
]; ];
@ -430,7 +430,7 @@ in
resultPath = "/var/lib/jellyfin/plugins/configurations/SSO-Auth.xml"; resultPath = "/var/lib/jellyfin/plugins/configurations/SSO-Auth.xml";
replacements = [ replacements = [
{ {
name = [ "%SSO_SECRET%" ]; name = [ "SSO_SECRET" ];
source = cfg.sso.sharedSecret.result.path; source = cfg.sso.sharedSecret.result.path;
} }
]; ];
@ -449,7 +449,14 @@ in
client_secret.source = cfg.sso.sharedSecretForAuthelia.result.path; client_secret.source = cfg.sso.sharedSecretForAuthelia.result.path;
public = false; public = false;
authorization_policy = cfg.sso.authorization_policy; authorization_policy = cfg.sso.authorization_policy;
redirect_uris = [ "https://${cfg.subdomain}.${cfg.domain}/sso/OID/r/${cfg.sso.provider}" ]; redirect_uris = [
"https://${cfg.subdomain}.${cfg.domain}/sso/OID/r/${cfg.sso.provider}"
"https://${cfg.subdomain}.${cfg.domain}/sso/OID/redirect/${cfg.sso.provider}"
];
require_pkce = true;
pkce_challenge_method = "S256";
userinfo_signed_response_alg = "none";
token_endpoint_auth_method = "client_secret_post";
} }
]; ];
}; };