extract pocket-id setup to sso role
1 file changed, 33 insertions(+), 0 deletions(-)
changed files
A system/roles/sso.nix
@@ -0,0 +1,33 @@ +{ + config, + ... +}: +let + domain = config.networking.domain; +in +{ + age.secrets.pocket-id.file = ../../secrets/pocket-id.age; + + services.pocket-id = { + enable = true; + environmentFile = config.age.secrets.pocket-id.path; + settings = { + APP_URL = "https://id.${domain}"; + TRUST_PROXY = true; + }; + }; + + services.caddy.virtualHosts = { + "id.${domain}" = { + extraConfig = '' + encode zstd gzip + reverse_proxy 127.0.0.1:1411 + ''; + }; + "iam.${domain}" = { + extraConfig = '' + redir https://id.${domain}{uri} permanent + ''; + }; + }; +}