29 lines
714 B
Nix
29 lines
714 B
Nix
{ ... }:
|
|
{
|
|
services.lldap = {
|
|
enable = true;
|
|
settings = {
|
|
ldap_base_dn = "dc=home,dc=2rjus,dc=net";
|
|
ldap_user_email = "admin@home.2rjus.net";
|
|
ldap_user_dn = "admin";
|
|
ldaps_options = {
|
|
enabled = true;
|
|
port = 6360;
|
|
cert_file = "/var/lib/acme/auth01.home.2rjus.net/cert.pem";
|
|
key_file = "/var/lib/acme/auth01.home.2rjus.net/key.pem";
|
|
};
|
|
};
|
|
};
|
|
systemd.services.lldap = {
|
|
serviceConfig = {
|
|
SupplementaryGroups = [ "acme" ];
|
|
};
|
|
};
|
|
security.acme.certs."auth01.home.2rjus.net" = {
|
|
listenHTTP = ":80";
|
|
reloadServices = [ "lldap" ];
|
|
extraDomainNames = [ "ldap.home.2rjus.net" ];
|
|
enableDebugLogs = true;
|
|
};
|
|
}
|