forgejo: make sure ldap is setup when sso is enabled
This commit is contained in:
parent
d8981d465b
commit
e87508c753
2 changed files with 8 additions and 0 deletions
|
|
@ -553,6 +553,13 @@ in
|
||||||
# For Forgejo config: https://forgejo.org/docs/latest/admin/config-cheat-sheet
|
# For Forgejo config: https://forgejo.org/docs/latest/admin/config-cheat-sheet
|
||||||
# For cli info: https://docs.gitea.com/usage/command-line
|
# For cli info: https://docs.gitea.com/usage/command-line
|
||||||
(mkIf (cfg.enable && cfg.sso.enable != false) {
|
(mkIf (cfg.enable && cfg.sso.enable != false) {
|
||||||
|
assertions = [
|
||||||
|
{
|
||||||
|
assertion = cfg.ldap.enable == true;
|
||||||
|
message = "'shb.forgejo.ldap.enable' must be set to true and ldap configured when 'shb.forgejo.sso.enable' is true. Otherwise you will never be able to register new accounts.";
|
||||||
|
}
|
||||||
|
];
|
||||||
|
|
||||||
services.forgejo.settings = {
|
services.forgejo.settings = {
|
||||||
oauth2 = {
|
oauth2 = {
|
||||||
ENABLED = true;
|
ENABLED = true;
|
||||||
|
|
|
||||||
|
|
@ -330,6 +330,7 @@ in
|
||||||
basic
|
basic
|
||||||
shb.test.certs
|
shb.test.certs
|
||||||
https
|
https
|
||||||
|
ldap
|
||||||
shb.test.ldap
|
shb.test.ldap
|
||||||
(shb.test.sso config.shb.certs.certs.selfsigned.n)
|
(shb.test.sso config.shb.certs.certs.selfsigned.n)
|
||||||
sso
|
sso
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue