c3d2/nixos-modules
c3d2/nixos-modules
22
0
Fork 0
mirror of https://github.com/SuperSandro2000/nixos-modules.git synced 2024-06-02 06:19:22 +02:00
Code Releases Activity

hedgedoc: add userFilterGroup option

Browse Source
This commit is contained in:
Sandro - 2023-06-28 01:00:14 +02:00
parent 0000000ae7
commit 9001816c4c
Signed by: sandro
GPG Key ID: 3AF5A43A3EECC2E5
1 changed files with 9 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
modules/hedgedoc.nix
View File

@ -1,7 +1,7 @@
{ config, lib, ... }:
let
cfg = config.services.hedgedoc;
cfg = config.services.hedgedoc.ldap;
inherit (config.security) ldap;
in
{
@ -11,16 +11,22 @@ in
login only via LDAP.
Use `service.hedgedoc.environmentFile` in format `bindCredentials=password` to set the credentials used by the search user
'');
userFilterGroup = lib.mkOption {
type = with lib.types; nullOr str;
default = null;
description = lib.mdDoc "Restrict logins to users in this group";
};
};
};
config = lib.mkIf cfg.ldap.enable {
config = lib.mkIf cfg.enable {
services.hedgedoc.settings.ldap = {
url = "ldaps://${ldap.domainName}:${toString ldap.port}";
bindDn = ldap.bindDN;
bindCredentials = "$bindCredentials";
searchBase = ldap.userBaseDN;
searchFilter = ldap.userFilter "{{username}}";
searchFilter = "(&(${ldap.groupFilter cfg.userFilterGroup})(${ldap.userFilter "{{username}}"}))";
tlsca = "/etc/ssl/certs/ca-certificates.crt";
useridField = ldap.userField;
};