william/nix-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

added keycloak service

Browse source
This commit is contained in:
baduhai 2023-01-08 18:36:04 -03:00
parent b3a3b7ee75
commit fe5352b703
4 changed files with 46 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

35
hosts/servers/alexandria/services.nix
View file

@ -7,6 +7,11 @@
owner = "paperless";
group = "hosted";
};
keycloakpg-pass = {
file = ../../../secrets/keycloakpg-pass.age;
owner = "user";
group = "hosted";
};
};
services = {
@ -33,6 +38,24 @@
group = "hosted";
};
keycloak = {
enable = true;
database = {
type = "postgresql";
createLocally = true;
username = "keycloak";
passwordFile = config.age.secrets.keycloakpg-pass.path;
};
settings = {
hostname = "baduhai.me";
http-relative-path = "/cloak";
http-port = lib.toInt "${config.ports.keycloak}";
proxy = "passthrough";
http-enabled = true;
initialAdminPassword = "changeme";
};
};
minecraft-server = {
enable = true;
eula = true;
@ -57,7 +80,13 @@
recommendedProxySettings = true;
recommendedTlsSettings = true;
virtualHosts = {
"baduhai.me" = { useACMEHost = "baduhai.me"; forceSSL = true; kTLS = true; root = inputs.homepage; };
"baduhai.me" = {
useACMEHost = "baduhai.me";
forceSSL = true;
kTLS = true;
root = inputs.homepage;
locations."/cloak/".proxyPass = "http://127.0.0.1:${config.ports.keycloak}/cloak/";
};
"bazarr.baduhai.me" = { useACMEHost = "baduhai.me"; forceSSL = true; kTLS = true; locations."/".proxyPass = "http://127.0.0.1:${config.ports.bazaar}"; };
"bitwarden.baduhai.me" = { useACMEHost = "baduhai.me"; forceSSL = true; kTLS = true; locations."/".proxyPass = "http://127.0.0.1:${config.ports.vaultwarden}"; };
"cinny.baduhai.me" = { useACMEHost = "baduhai.me"; forceSSL = true; kTLS = true; locations."/".proxyPass = "http://127.0.0.1:${config.ports.cinny}"; };
@ -73,8 +102,8 @@
"sonarr.baduhai.me" = { useACMEHost = "baduhai.me"; forceSSL = true; kTLS = true; locations."/".proxyPass = "http://127.0.0.1:${config.ports.sonarr}"; };
"sync.baduhai.me" = { useACMEHost = "baduhai.me"; forceSSL = true; kTLS = true; locations."/".proxyPass = "http://127.0.0.1:${config.ports.syncthing}"; };
"whoogle.baduhai.me" = { useACMEHost = "baduhai.me"; forceSSL = true; kTLS = true; locations."/".proxyPass = "http://127.0.0.1:${config.ports.whoogle}"; };
};
};
};
paperless = {
enable = true;
@ -88,6 +117,8 @@
};
};
postgresql.enable = true;
qbittorrent = {
enable = true;
user = "user";

1
hosts/servers/alexandria/variables.nix
View file

@ -22,6 +22,7 @@ in
jellyfin = mkStringOption "8096";
whoogle = mkStringOption "8007";
qbittorrent = mkStringOption "8008";
keycloak = mkStringOption "8009";
sonarr = mkStringOption "8989";
jackett = mkStringOption "9117";
};