all repos — nixfiles @ 73dae29b4b7efbd7bd6f32dda0378427c3c22b54

System and user configuration, managed by nix and home-manager

linde: remove rauthy

Alan Pearce
commit

73dae29b4b7efbd7bd6f32dda0378427c3c22b54

parent

48bcae55ad58ebb7b62c72598cdb5d79b6e8e77b

3 files changed, 1 insertion(+), 70 deletions(-)

changed files
D secrets/rauthy.age

Not showing binary file.

M secrets/secrets.nix → secrets/secrets.nix
@@ -20,7 +20,6 @@ redis-website = [ linde ];
caddy = [ linde ]; pocket-id = [ linde ]; - rauthy = [ linde ]; binarycache = [ linde ]; forgejo-actions-runner = [ linde ]; paperless = [ linde ];
M system/hosts/linde.nix → system/hosts/linde.nix
@@ -56,7 +56,6 @@ cifs-paperless.file = ../../secrets/cifs-paperless.age;
forgejo-actions-runner.file = ../../secrets/forgejo-actions-runner.age; ntfy.file = ../../secrets/ntfy.age; pocket-id.file = ../../secrets/pocket-id.age; - rauthy.file = ../../secrets/rauthy.age; readeck.file = ../../secrets/readeck.age; };
@@ -631,8 +630,7 @@ '';
}; "iam.alin.ovh" = { extraConfig = '' - encode zstd gzip - reverse_proxy http://127.0.0.1:8080 + redir https://id.alin.ovh{uri} permanent ''; }; "files.${domain}" = {
@@ -929,72 +927,6 @@ environmentFile = config.age.secrets.pocket-id.path;
settings = { APP_URL = "https://id.alin.ovh"; TRUST_PROXY = true; - }; - }; - - users.groups.rauthy = { }; - users.users.rauthy = { - isSystemUser = true; - createHome = true; - home = "/srv/rauthy"; - group = "rauthy"; - }; - virtualisation.oci-containers = { - backend = "podman"; - containers = { - rauthy = - let - domain = "alin.ovh"; - toml = pkgs.formats.toml { }; - cfg = { - bootstrap = { - admin_email = "admin@${domain}"; - }; - cluster = { - node_id = 1; - wal_ignore_lock = true; - }; - encryption = { - keys = [ "4babe063/HXY+N6xpGNaCZ5QsfIJB7jJscqmZfy/9UrGc3V2Kyi8=" ]; - key_active = "9f93e3c7"; - }; - email = { - smtp_url = "host.containers.internal"; - smtp_port = 587; - smtp_from = "Rauthy <rauthy@${domain}>"; - smtp_username = "rauthy"; - smtp_password = "rauthy"; - smtp_danger_insecure = true; - }; - server = { - scheme = "http"; - pub_url = "iam.${domain}"; - proxy_mode = true; - trusted_proxies = [ - "10.0.0.0/8" - ]; - }; - webauthn = { - rp_id = domain; - rp_origin = "https://iam.${domain}:443"; - }; - }; - in - { - image = "ghcr.io/sebadob/rauthy:0.32.6"; - ports = [ "8080:8080" ]; - user = "971:969"; - volumes = [ - "${toml.generate "config.toml" cfg}:/app/config.toml" - "/srv/rauthy:/app/data" - ]; - environment = { - SMTP_URL = "host.containers.internal"; - SMTP_DANGER_INSECURE = "true"; - }; - environmentFiles = [ config.age.secrets.rauthy.path ]; - serviceName = "rauthy"; - }; }; };