dachxy/nix-conf
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

chore: update flake

Browse source
This commit is contained in:
danny 2026-01-24 15:10:26 +08:00
parent 25482857d4
commit b4b7997ac5
11 changed files with 163 additions and 140 deletions
Download patch file Download diff file Expand all files Collapse all files

1
system/dev/dn-server/services/mail-server.nix
View file

@ -18,6 +18,7 @@ in
"api.docker.com"
"cdn.segment.com"
"api.segment.io"
"sa-update.surbl.org"
];
mail-server =

5
system/dev/dn-server/services/metrics.nix
View file

@ -10,6 +10,7 @@ let
inherit (lib) optionalAttrs optional;
inherit (config.networking) hostName domain;
oidcEndpoint = "https://${config.services.keycloak.settings.hostname}/realms/master";
grafanaHostname = "grafana.${domain}";
prometheusHostname = "metrics.${domain}";
@ -118,13 +119,13 @@ in
extraSettings = {
"auth.generic_oauth" =
let
OIDCBaseUrl = "https://keycloak.net.dn/realms/master/protocol/openid-connect";
OIDCBaseUrl = "${oidcEndpoint}/protocol/openid-connect";
in
{
enabled = true;
allow_sign_up = true;
client_id = "grafana";
client_secret = ''$__file{${config.sops.secrets."grafana/client_secret".path}}'';
client_secret = "$__file{${config.sops.secrets."grafana/client_secret".path}}";
scopes = "openid email profile offline_access roles";
email_attribute_path = "email";
login_attribute_path = "username";