William
952a55f03d
Added Kanidm server configuration to serve as central identity provider for all services. Configuration includes: - Server on auth.baduhai.dev with HTTPS - LDAP support on port 636 for legacy integrations - Nginx reverse proxy with SSL termination - Added to shared services for DNS resolution Kanidm will provide OAuth2/OIDC authentication for Nextcloud, Vaultwarden, Forgejo, and other services.
47 lines
1.1 KiB
Nix
47 lines
1.1 KiB
Nix
# Shared service definitions for cross-host configuration
|
|
# Used by:
|
|
# - alexandria: DNS server (LAN) + service hosting (vaultwarden, nextcloud, jellyfin, kanidm)
|
|
# - trantor: DNS server (Tailnet) + service hosting (forgejo)
|
|
{
|
|
services = [
|
|
{
|
|
name = "kanidm";
|
|
domain = "auth.baduhai.dev";
|
|
host = "alexandria";
|
|
lanIP = "192.168.15.142";
|
|
tailscaleIP = "100.76.19.50";
|
|
port = 8443;
|
|
}
|
|
{
|
|
name = "vaultwarden";
|
|
domain = "pass.baduhai.dev";
|
|
host = "alexandria";
|
|
lanIP = "192.168.15.142";
|
|
tailscaleIP = "100.76.19.50";
|
|
port = 8222;
|
|
}
|
|
{
|
|
name = "forgejo";
|
|
domain = "git.baduhai.dev";
|
|
host = "trantor";
|
|
tailscaleIP = "100.108.5.90";
|
|
port = 3000;
|
|
}
|
|
{
|
|
name = "nextcloud";
|
|
domain = "cloud.baduhai.dev";
|
|
host = "alexandria";
|
|
lanIP = "192.168.15.142";
|
|
tailscaleIP = "100.76.19.50";
|
|
port = 443;
|
|
}
|
|
{
|
|
name = "jellyfin";
|
|
domain = "jellyfin.baduhai.dev";
|
|
host = "alexandria";
|
|
lanIP = "192.168.15.142";
|
|
tailscaleIP = "100.76.19.50";
|
|
port = 8096;
|
|
}
|
|
];
|
|
}
|