From 42128ebbe19d0aa3841245a423aeb6636c9b23d3 Mon Sep 17 00:00:00 2001
From: Grisha Shipunov
Date: Sun, 19 Jan 2025 20:38:22 +0100
Subject: move microvms to hosts folder

---
 hosts/auth/keycloak.nix | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)
 create mode 100644 hosts/auth/keycloak.nix

(limited to 'hosts/auth/keycloak.nix')

diff --git a/hosts/auth/keycloak.nix b/hosts/auth/keycloak.nix
new file mode 100644
index 0000000..de537ef
--- /dev/null
+++ b/hosts/auth/keycloak.nix
@@ -0,0 +1,18 @@
+{ config, ... }:
+{
+  services.keycloak = {
+    enable = true;
+    database = {
+      type = "postgresql";
+      createLocally = true;
+      passwordFile = config.sops.secrets."keycloak/db_pass".path;
+    };
+    settings = {
+      hostname = "https://auth.oxapentane.com";
+      http-port = 38080;
+      http-enabled = true;
+      proxy-headers = "xforwarded";
+      proxy-trusted-addresses = "10.89.88.0/24,fd31:185d:722f::/48";
+    };
+  };
+}
-- 
cgit v1.3.1