From 5c3f0886e592ff2d3e3a8588ab496f36c19e0ce9 Mon Sep 17 00:00:00 2001
From: Grigory Shipunov
Date: Tue, 14 Jan 2025 21:24:05 +0000
Subject: yeet authentik, add keycloak and radicale

---
 microvms/auth/keycloak.nix | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)
 create mode 100644 microvms/auth/keycloak.nix

(limited to 'microvms/auth/keycloak.nix')

diff --git a/microvms/auth/keycloak.nix b/microvms/auth/keycloak.nix
new file mode 100644
index 0000000..de537ef
--- /dev/null
+++ b/microvms/auth/keycloak.nix
@@ -0,0 +1,18 @@
+{ config, ... }:
+{
+  services.keycloak = {
+    enable = true;
+    database = {
+      type = "postgresql";
+      createLocally = true;
+      passwordFile = config.sops.secrets."keycloak/db_pass".path;
+    };
+    settings = {
+      hostname = "https://auth.oxapentane.com";
+      http-port = 38080;
+      http-enabled = true;
+      proxy-headers = "xforwarded";
+      proxy-trusted-addresses = "10.89.88.0/24,fd31:185d:722f::/48";
+    };
+  };
+}
-- 
cgit v1.3.1