diff options
| author | Joe Mou <dev@mou.fo> | 2023-09-28 21:12:24 -0400 |
|---|---|---|
| committer | Joe Mou <dev@mou.fo> | 2023-10-01 13:55:14 -0400 |
| commit | 2f1e0c381e04b25b8c64f260967691f4cf841127 (patch) | |
| tree | e2dd0b7e4c50847cb29bbdca92daceb5d04c8390 /hostnix/weebnix/configuration.nix | |
| parent | 8af87ef973667a8a430532a96a2d2913dd1147cd (diff) | |
Initial configuration of Home Assistant w/ oauth2-proxy for KeyCloak authentication
Diffstat (limited to 'hostnix/weebnix/configuration.nix')
| -rw-r--r-- | hostnix/weebnix/configuration.nix | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/hostnix/weebnix/configuration.nix b/hostnix/weebnix/configuration.nix index f38148a..0e6591d 100644 --- a/hostnix/weebnix/configuration.nix +++ b/hostnix/weebnix/configuration.nix @@ -4,6 +4,7 @@ imports = [ ./dyndns.nix ./hardware-configuration.nix + ./home-assistant.nix ./syncthing.nix ./system.nix ]; @@ -81,6 +82,12 @@ ''; }; + # TODO remove upon switching to production certs + services.oauth2_proxy.extraConfig = { + "ssl-insecure-skip-verify" = true; + "ssl-upstream-insecure-skip-verify" = true; + }; + networking.firewall.allowedTCPPorts = [ 80 443 ]; # This value determines the NixOS release from which the default |