Torjus Håkestad 1d7eec7ad3 system: add kanidm PAM/NSS client module ...

Add homelab.kanidm.enable option for central authentication via Kanidm.
The module configures:
- PAM/NSS integration with kanidm-unixd
- Client connection to auth.home.2rjus.net
- Login authorization for ssh-users group

Enable on testvm01-03 for testing.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

2026-02-08 13:43:41 +01:00

..

monitoring

monitoring: add nixos-exporter to all hosts

2026-02-06 23:55:29 +01:00

pki

pki: add new vault root ca to pki

2026-02-03 06:53:59 +01:00

acme.nix

acme: migrate from step-ca to OpenBao PKI

2026-02-07 18:20:10 +01:00

autoupgrade.nix

Add autoupgrade

2025-02-06 19:58:01 +01:00

default.nix

system: add kanidm PAM/NSS client module

2026-02-08 13:43:41 +01:00

homelab-deploy.nix

homelab-deploy: enable prometheus metrics

2026-02-07 08:04:23 +01:00

kanidm-client.nix

system: add kanidm PAM/NSS client module

2026-02-08 13:43:41 +01:00

motd.nix

system: add UTC suffix to MOTD commit timestamp

2026-02-06 00:34:24 +01:00

nix.nix

system: add nixos-rebuild-test helper script

2026-02-06 00:12:16 +01:00

packages.nix

Add some default packages

2025-02-24 18:54:59 +01:00

root-user.nix

secrets: migrate all hosts from sops to OpenBao vault

2026-02-05 18:43:09 +01:00

sshd.nix

Add template host

2024-03-08 20:10:50 +01:00

vault-secrets.nix

system: replace writeShellScript with writeShellApplication

2026-02-06 00:17:24 +01:00

zram.nix

system: enable zram swap for all hosts

2026-02-08 13:02:58 +01:00