c3d2/nix-config
c3d2
/
nix-config
24
7
Fork 3
Code Issues 12 Pull Requests 2 Releases Wiki Activity

grafana: fix ldap group seeding

This commit is contained in:
Sandro - 2023-07-02 05:49:20 +02:00
parent e12024d668
commit 999999920e
Signed by: sandro
GPG Key ID: 3AF5A43A3EECC2E5
2 changed files with 7 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
config/default.nix
View File

@ -220,6 +220,12 @@
internalIp4 = hosts4.auth;
internalIp6 = hosts6.up4.auth;
ldapPreset = true;
seedSettings.groups = lib.singleton {
long_name = "Grafana Administrators";
name = "grafana-admins";
dont_manage_members = true;
permissions = {};
};
};
postgresql.upgrade = {

12
hosts/grafana/default.nix
View File

@ -1,8 +1,5 @@
{ config, lib, pkgs, ... }:
let
ldapGroup = "grafana-admins";
in
{
microvm.mem = 4096;
c3d2.deployment.server = "server10";
@ -61,7 +58,7 @@ in
icon = "signin";
name = "auth.c3d2.de";
oauth_auto_login = true; # redirect automatically to the only oauth provider
role_attribute_path = "contains(groups[*], '${ldapGroup}') && 'Admin'";
role_attribute_path = "contains(groups[*], 'grafana-admins') && 'Admin'";
# https://dexidp.io/docs/custom-scopes-claims-clients/
scopes = "openid email groups profile offline_access";
token_url = "https://auth.c3d2.de/dex/token";
@ -108,13 +105,6 @@ in
};
};
};
portunus.seedingSettings.groups = lib.singleton {
long_name = "Grafana Administrators";
name = ldapGroup;
dont_manage_members = true;
permissions = {};
};
};
sops = {