c3d2/nix-config
c3d2
/
nix-config
24
7
Fork 3
Code Issues 12 Pull Requests 2 Releases Wiki Activity

mastodon: move ldap to nixos-modules

This commit is contained in:
Sandro - 2023-05-05 00:57:50 +02:00
parent 8f664240ed
commit 0000000f1d
Signed by: sandro
GPG Key ID: 3AF5A43A3EECC2E5
2 changed files with 4 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
flake.lock
View File

@ -421,11 +421,11 @@
]
},
"locked": {
"lastModified": 1683057005,
"narHash": "sha256-e3uDaI4u1w6/7YxU/U5sV2Oayapu5AEMFUeiQFF/LHI=",
"lastModified": 1683241081,
"narHash": "sha256-eTz73pjTKEgzFfG6V7oA2LK1Wfv2ZFoSe7vUNphrPAc=",
"owner": "SuperSandro2000",
"repo": "nixos-modules",
"rev": "e220c41ceed6b3a21352865779c4f3df354a525e",
"rev": "d06e5fde7fdc1847322e9b30f83a32c380eb2f20",
"type": "github"
},
"original": {

13
hosts/mastodon/default.nix
View File

@ -110,23 +110,12 @@
enable = true;
configureNginx = true;
elasticsearch.host = "127.0.0.1";
ldap.enable = true;
extraConfig = {
ALTERNATE_DOMAINS = lib.concatStringsSep "," config.services.nginx.virtualHosts.${config.services.mastodon.localDomain}.serverAliases;
DEFAULT_LOCALE = "de";
WEB_CONCURRENCY = toString config.microvm.vcpu;
# MAX_THREADS = toString config.microvm.vcpu;
LOG_LEVEL = "debug";
LDAP_ENABLED = "true";
LDAP_METHOD = "simple_tls";
LDAP_HOST = "auth.c3d2.de";
LDAP_PORT = "636";
LDAP_BIND_DN = "uid=search,ou=users,dc=c3d2,dc=de";
LDAP_BASE = "ou=users,dc=c3d2,dc=de";
LDAP_SEARCH_FILTER = "(&(objectclass=person)(|(%{uid}=%{email})(%{mail}=%{email})))";
LDAP_UID = "uid";
# convert .,- (space) in LDAP usernames to underscore
LDAP_UID_CONVERSION_ENABLED = "true";
};
localDomain = "c3d2.social";
otpSecretFile = config.sops.secrets."mastodon/otp-secret".path;