@@ -12,7 +12,7 @@
|
||||
let
|
||||
selfPkgs = inputs.self.packages.${system};
|
||||
hmConfig = config.home-manager.users.${user};
|
||||
inherit (hmConfig.virtualisation.quadlet) volumes networks;
|
||||
inherit (hmConfig.virtualisation.quadlet) containers volumes networks;
|
||||
autheliaClientId = "3U5O3TkoIFb3bz3MMqscGEDx2wkT2G48iLLJalqSKA40zCweSBfgORGNMjDEidz4qiQ93qIoW2UlgTyLfzAwbklTvwHJPcarmXaq";
|
||||
in
|
||||
{
|
||||
@@ -45,12 +45,12 @@ in
|
||||
authelia-outline.content = builtins.readFile (
|
||||
(pkgs.formats.yaml { }).generate "outline.yaml" {
|
||||
identity_providers.oidc = {
|
||||
authorization_policies.docs = {
|
||||
authorization_policies.outline = {
|
||||
default_policy = "deny";
|
||||
rules = [
|
||||
{
|
||||
policy = "one_factor";
|
||||
subject = "group:docs";
|
||||
subject = "group:outline";
|
||||
}
|
||||
];
|
||||
};
|
||||
@@ -61,7 +61,7 @@ in
|
||||
client_name = "Outline";
|
||||
client_secret = hmConfig.sops.placeholder."outline/authelia/digest";
|
||||
redirect_uris = [ "https://docs.karaolidis.com/auth/oidc.callback" ];
|
||||
authorization_policy = "docs";
|
||||
authorization_policy = "outline";
|
||||
scopes = [
|
||||
"openid"
|
||||
"profile"
|
||||
@@ -83,6 +83,7 @@ in
|
||||
volumes = {
|
||||
outline-redis = { };
|
||||
outline-postgresql = { };
|
||||
# TODO: Move to mass storage
|
||||
outline = { };
|
||||
};
|
||||
|
||||
@@ -125,7 +126,11 @@ in
|
||||
];
|
||||
};
|
||||
|
||||
unitConfig.After = [ "sops-nix.service" ];
|
||||
unitConfig.After = [
|
||||
"${containers.outline-postgresql._serviceName}.service"
|
||||
"${containers.outline-redis._serviceName}.service"
|
||||
"sops-nix.service"
|
||||
];
|
||||
};
|
||||
|
||||
outline-postgresql = {
|
||||
|
Reference in New Issue
Block a user