ldap working for now
parent
54a1135f3b
commit
58dd7a02d1
|
|
@ -11,6 +11,7 @@
|
||||||
./nextcloud.nix
|
./nextcloud.nix
|
||||||
./matrix-synapse.nix
|
./matrix-synapse.nix
|
||||||
./nginx.nix
|
./nginx.nix
|
||||||
|
./openldap.nix
|
||||||
];
|
];
|
||||||
|
|
||||||
# Boot
|
# Boot
|
||||||
|
|
@ -37,13 +38,6 @@
|
||||||
security.acme.email = "webmaster@bib3.de";
|
security.acme.email = "webmaster@bib3.de";
|
||||||
security.acme.acceptTerms = true;
|
security.acme.acceptTerms = true;
|
||||||
|
|
||||||
# Select internationalisation properties.
|
|
||||||
# i18n.defaultLocale = "en_US.UTF-8";
|
|
||||||
# console = {
|
|
||||||
# font = "Lat2-Terminus16";
|
|
||||||
# keyMap = "us";
|
|
||||||
# };
|
|
||||||
|
|
||||||
# Set your time zone.
|
# Set your time zone.
|
||||||
time.timeZone = "UTC";
|
time.timeZone = "UTC";
|
||||||
|
|
||||||
|
|
@ -62,22 +56,6 @@
|
||||||
services.openssh.enable = true;
|
services.openssh.enable = true;
|
||||||
networking.firewall.allowedTCPPorts = [ 22 80 443 ];
|
networking.firewall.allowedTCPPorts = [ 22 80 443 ];
|
||||||
|
|
||||||
services.nginx = {
|
|
||||||
enable = true;
|
|
||||||
# only recommendedProxySettings and recommendedGzipSettings are strictly required,
|
|
||||||
# but the rest make sense as well
|
|
||||||
recommendedTlsSettings = true;
|
|
||||||
recommendedOptimisation = true;
|
|
||||||
recommendedGzipSettings = true;
|
|
||||||
recommendedProxySettings = true;
|
|
||||||
|
|
||||||
virtualHosts = {
|
|
||||||
"default_server" = {
|
|
||||||
root = "/var/www/default";
|
|
||||||
};
|
|
||||||
};
|
|
||||||
};
|
|
||||||
|
|
||||||
# Define a user account. Don't forget to set a password with ‘passwd’.
|
# Define a user account. Don't forget to set a password with ‘passwd’.
|
||||||
users.users.loooph = {
|
users.users.loooph = {
|
||||||
isNormalUser = true;
|
isNormalUser = true;
|
||||||
|
|
@ -100,7 +78,7 @@
|
||||||
# List packages installed in system profile. To search, run:
|
# List packages installed in system profile. To search, run:
|
||||||
# $ nix search wget
|
# $ nix search wget
|
||||||
environment.systemPackages = with pkgs; [
|
environment.systemPackages = with pkgs; [
|
||||||
wget vim git htop tmux openssl
|
wget vim git htop tmux openssl fd
|
||||||
];
|
];
|
||||||
|
|
||||||
}
|
}
|
||||||
|
|
|
||||||
|
|
@ -0,0 +1,24 @@
|
||||||
|
{config, pkgs, ...}:
|
||||||
|
|
||||||
|
{
|
||||||
|
services.openldap = {
|
||||||
|
enable = true;
|
||||||
|
dataDir = "/var/lib/openldap";
|
||||||
|
rootpwFile = "/etc/nixos/secret/openldaproot.pw";
|
||||||
|
suffix = "o=bib3,c=DE";
|
||||||
|
rootdn = "cn=admin,o=bib3,c=DE";
|
||||||
|
declarativeContents = ''
|
||||||
|
dn: o=bib3, c=DE
|
||||||
|
objectclass: organization
|
||||||
|
|
||||||
|
dn: ou=users, o=bib3, c=DE
|
||||||
|
objectclass: organizationalUnit
|
||||||
|
ou: users
|
||||||
|
|
||||||
|
dn: cn=test, ou=users, o=bib3, c=DE
|
||||||
|
objectclass: person
|
||||||
|
cn: test
|
||||||
|
sn: test
|
||||||
|
'';
|
||||||
|
};
|
||||||
|
}
|
||||||
Loading…
Reference in New Issue