yeet authentik, add keycloak and radicale

1 files changed, 18 insertions, 0 deletions

diff --git a/microvms/auth/keycloak.nix b/microvms/auth/keycloak.nix
new file mode 100644
index 0000000..de537ef
--- /dev/null
+++ b/microvms/auth/keycloak.nix
@@ -0,0 +1,18 @@
+{ config, ... }:
+{
+  services.keycloak = {
+    enable = true;
+    database = {
+      type = "postgresql";
+      createLocally = true;
+      passwordFile = config.sops.secrets."keycloak/db_pass".path;
+    };
+    settings = {
+      hostname = "https://auth.oxapentane.com";
+      http-port = 38080;
+      http-enabled = true;
+      proxy-headers = "xforwarded";
+      proxy-trusted-addresses = "10.89.88.0/24,fd31:185d:722f::/48";
+    };
+  };
+}