diff options
Diffstat (limited to 'hostnix')
| -rw-r--r-- | hostnix/elmo/glauth/glauth.toml | 23 | ||||
| -rw-r--r-- | hostnix/elmo/oidc.nix | 8 |
2 files changed, 31 insertions, 0 deletions
diff --git a/hostnix/elmo/glauth/glauth.toml b/hostnix/elmo/glauth/glauth.toml new file mode 100644 index 0000000..5efcf97 --- /dev/null +++ b/hostnix/elmo/glauth/glauth.toml @@ -0,0 +1,23 @@ +[ldap] + enabled = true + listen = "[::1]:3893" +[ldaps] + enabled = false +[backend] + datastore = "config" + baseDN = "dc=elmo,dc=mou,dc=fo" + anonymousdse = false +[[users]] + name = "hackers" + uidnumber = 5001 + primarygroup = 5501 + passsha256 = "6478579e37aff45f013e14eeb30b3cc56c72ccdc310123bcdf53e0333e3f416a" # dogood + sshkeys = [ "ssh-dss AAAAB3..." ] +[[users]] + name = "uberhackers" + uidnumber = 5006 + primarygroup = 5501 + passbcrypt = "243261243130244B62463462656F7265504F762E794F324957746D656541326B4B46596275674A79336A476845764B616D65446169784E41384F4432" # dogood +[[groups]] + name = "superheros" + gidnumber = 5501 diff --git a/hostnix/elmo/oidc.nix b/hostnix/elmo/oidc.nix index 88f8e9a..4421eb9 100644 --- a/hostnix/elmo/oidc.nix +++ b/hostnix/elmo/oidc.nix @@ -1,6 +1,14 @@ { lib, pkgs, ... }: { + systemd.services.glauth = { + wantedBy = [ "multi-user.target" ]; + serviceConfig = { + DynamicUser = true; + }; + script = "${pkgs.glauth}/bin/glauth -c ${./glauth/glauth.toml}"; + }; + services.dex = { enable = true; settings = { |