gerd.lldap: renamed user-pass to admin-user-pass and added bind-user-pass

This commit is contained in:
eyjhb 2024-08-10 19:23:17 +02:00
parent 3c808fa3a7
commit 17fb88a8b4
Signed by: eyjhb
GPG key ID: 609F508E3239F920
6 changed files with 16 additions and 7 deletions

View file

@ -1,3 +1,5 @@
{ config, ... }:
{
age.secrets = {
# authelia
@ -6,13 +8,19 @@
authelia-session.file = ./authelia/session.age;
authelia-oidc-issuer-privatekey-pem.file = ./authelia/oidc-issuer-privatekey-pem.age;
authelia-oidc-issuer-privatekey-crt.file = ./authelia/oidc-issuer-privatekey-crt.age;
authelia-lldap-bind-user-pass.file = ./authelia/lldap-bind-user-pass.age;
# lldap
lldap-user-pass.file = ./lldap/user-pass.age;
lldap-admin-user-pass.file = ./lldap/admin-user-pass.age;
lldap-bind-user-pass = {
file = ./lldap/bind-user-pass.age;
group = "secrets-lldap-bind-user-pass";
mode = "0440";
};
# mumble
murmur-env.file = ./murmur/env.age;
murmur-superpassword.file = ./murmur/superpassword.age;
};
users.groups.secrets-lldap-bind-user-pass = {};
}

View file

@ -16,10 +16,10 @@ in
"authelia/session.age".publicKeys = defaultAccess;
"authelia/oidc-issuer-privatekey-pem.age".publicKeys = defaultAccess;
"authelia/oidc-issuer-privatekey-crt.age".publicKeys = defaultAccess;
"authelia/lldap-bind-user-pass.age".publicKeys = defaultAccess;
# lldap
"lldap/user-pass.age".publicKeys = defaultAccess;
"lldap/admin-user-pass.age".publicKeys = defaultAccess;
"lldap/bind-user-pass.age".publicKeys = defaultAccess;
# mumble
"murmur/env.age".publicKeys = defaultAccess;