2 files changed, 31 insertions, 0 deletions
diff --git a/hostnix/elmo/glauth/glauth.toml b/hostnix/elmo/glauth/glauth.toml
new file mode 100644
index 0000000..5efcf97
--- /dev/null
+++ b/hostnix/elmo/glauth/glauth.toml
@@ -0,0 +1,23 @@
+[ldap]
+  enabled = true
+  listen = "[::1]:3893"
+[ldaps]
+  enabled = false
+[backend]
+  datastore = "config"
+  baseDN = "dc=elmo,dc=mou,dc=fo"
+  anonymousdse = false
+[[users]]
+  name = "hackers"
+  uidnumber = 5001
+  primarygroup = 5501
+  passsha256 = "6478579e37aff45f013e14eeb30b3cc56c72ccdc310123bcdf53e0333e3f416a"   # dogood
+  sshkeys = [ "ssh-dss AAAAB3..." ]
+[[users]]
+  name = "uberhackers"
+  uidnumber = 5006
+  primarygroup = 5501
+  passbcrypt = "243261243130244B62463462656F7265504F762E794F324957746D656541326B4B46596275674A79336A476845764B616D65446169784E41384F4432"   # dogood
+[[groups]]
+  name = "superheros"
+  gidnumber = 5501
diff --git a/hostnix/elmo/oidc.nix b/hostnix/elmo/oidc.nix
index 88f8e9a..4421eb9 100644
--- a/hostnix/elmo/oidc.nix
+++ b/hostnix/elmo/oidc.nix
@@ -1,6 +1,14 @@
 { lib, pkgs, ... }:
 
 {
+  systemd.services.glauth = {
+    wantedBy = [ "multi-user.target" ];
+    serviceConfig = {
+      DynamicUser = true;
+    };
+    script = "${pkgs.glauth}/bin/glauth -c ${./glauth/glauth.toml}";
+  };
+
   services.dex = {
     enable = true;
     settings = {