ambroisie/nix-config
ambroisie/nix-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

secrets: add sso

Browse source
This commit is contained in:
Bruno BELANYI 2021-08-30 14:17:18 +02:00
parent fd526b674b
commit 878759cb77
6 changed files with 24 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
secrets/default.nix
View file

@ -58,6 +58,8 @@ throwOnCanary {
podgrab.password = fileContents ./podgrab/password.txt; podgrab.password = fileContents ./podgrab/password.txt;
sso = import ./sso { inherit lib; };
transmission.password = fileContents ./transmission/password.txt; transmission.password = fileContents ./transmission/password.txt;
users = { users = {

1
secrets/sso/.gitattributes vendored Normal file
View file

@ -0,0 +1 @@
/default.nix filter diff

BIN
secrets/sso/ambroisie/password-hash.txt Normal file
View file

Binary file not shown.

BIN
secrets/sso/ambroisie/totp-secret.txt Normal file
View file

Binary file not shown.

BIN
secrets/sso/auth-key.txt Normal file
View file

Binary file not shown.

21
secrets/sso/default.nix Normal file
View file

@ -0,0 +1,21 @@
{ lib }:
let
inherit (lib) fileContents;
importUser = (user: {
# bcrypt hashed: `htpasswd -BnC 10 ""`
passwordHash = fileContents (./. + "/${user}/password-hash.txt");
# base32 encoded: `printf '<secret>' | base32 | tr -d =`
totpSecret = fileContents (./. + "/${user}/totp-secret.txt");
});
in
{
auth_key = fileContents ./auth-key.txt;
users = lib.flip lib.genAttrs importUser [
"ambroisie"
];
groups = {
root = [ "ambroisie" ];
};
}