Henry-Hiles/nixos
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Auth API

Browse source
This commit is contained in:
Henry Hiles 2025-06-20 14:14:44 -04:00
commit a1878bc2e4
No known key found for this signature in database
9 changed files with 187 additions and 68 deletions
Download patch file Download diff file Expand all files Collapse all files

21
clients/quadraticserver/auth.nix Normal file
View file

@ -0,0 +1,21 @@
{
inputs,
config,
...
}: {
imports = [inputs.matrixoidc.nixosModules.default];
services = let
socket = "/var/run/matrixoidc/socket";
domain = "auth.federated.nexus";
in {
matrixoidc = {
enable = true;
jwtSecretFile = config.age.secrets."oidcJwtSecret.age".path;
args = ["--socket" socket "--homeserver" config.services.grapevine.settings.server_discovery.client.base_url "--issuer" "https://${domain}" "--authorizeEndpoint" "https://federated.nexus/login" "--serviceDomain" "federated.nexus"];
group = "caddy";
};
caddy.virtualHosts."${domain}".extraConfig = "reverse_proxy unix/${socket}";
};
}