hackclub/burrow
1
0
Fork 0
Code Pull requests Releases Packages Activity Actions

Move Burrow Google account aliases into agenix

Browse source
This commit is contained in:
Conrad Kramer 2026-04-18 02:18:22 -07:00
parent bc85e256f2
commit c58d06dfc1
5 changed files with 48 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

8
nixos/hosts/burrow-forge/default.nix
View file

@ -13,7 +13,6 @@ let
inherit username;
name = identity.displayName;
email = identity.canonicalEmail;
sourceEmail = identity.sourceEmail or null;
isAdmin = identity.isAdmin or false;
passwordFile = authentikPasswordSecretPath identity;
}
@ -85,6 +84,12 @@ in
group = "root";
mode = "0400";
};
age.secrets.burrowAuthentikGoogleAccountMap = {
file = ../../../secrets/infra/authentik-google-account-map.json.age;
owner = "root";
group = "root";
mode = "0400";
};
age.secrets.burrowAuthentikUiTestPassword = {
file = ../../../secrets/infra/authentik-ui-test-password.age;
owner = "root";
@ -158,6 +163,7 @@ in
tailscaleClientSecretFile = config.age.secrets.burrowTailscaleOidcClientSecret.path;
googleClientIDFile = config.age.secrets.burrowAuthentikGoogleClientId.path;
googleClientSecretFile = config.age.secrets.burrowAuthentikGoogleClientSecret.path;
googleAccountMapFile = config.age.secrets.burrowAuthentikGoogleAccountMap.path;
googleLoginMode = "redirect";
userGroupName = contributors.groups.users;
adminGroupName = contributors.groups.admins;