From 96b949393cfa64f8b44e16d269d9148696e44299 Mon Sep 17 00:00:00 2001 From: Joe Mou Date: Thu, 25 Apr 2024 12:58:55 -0400 Subject: elmo: Move secrets to /var/secrets Clarifies that they are not managed by a distribution package. --- hostnix/elmo/oidc.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'hostnix/elmo/oidc.nix') diff --git a/hostnix/elmo/oidc.nix b/hostnix/elmo/oidc.nix index 7648e8c..bff769e 100644 --- a/hostnix/elmo/oidc.nix +++ b/hostnix/elmo/oidc.nix @@ -3,7 +3,7 @@ { services.keycloak = { enable = true; - database.passwordFile = "/var/lib/secrets/keycloak.dbpass"; + database.passwordFile = "/var/secrets/keycloak.dbpass"; settings = { hostname = "kc.elmo.mou.fo"; http-host = "127.0.0.1"; @@ -41,7 +41,7 @@ provider = "keycloak-oidc"; clientID = "oauth2-proxy"; # Sets OAUTH2_PROXY_COOKIE_SECRET and OAUTH2_PROXY_CLIENT_SECRET. - keyFile = "/var/lib/secrets/oauth2-proxy.env"; + keyFile = "/var/secrets/oauth2-proxy.env"; redirectURL = "https://kc.elmo.mou.fo/oauth2/callback"; extraConfig = { "oidc-issuer-url" = "https://kc.elmo.mou.fo/realms/prod"; -- cgit v1.3.1