lorenzo/servers
1
0
Fork 0
Code Pull requests Packages Activity

Connect Authelia to LDAP with LLDAP

Browse source
This commit is contained in:
Lorenzo Good 2025-12-31 22:54:03 -06:00
parent 7f14aaaa3d
commit 13c43273a5
Signed by: lorenzo
GPG key ID: 7FCD64BD81180ED0
6 changed files with 59 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

9
machines/lebesgue/config/configuration.nix
View file

@ -31,12 +31,19 @@
# oidcHmacSecretFile = config.sops.secrets.authelia-oidc-hmac.path;
sessionSecretFile = config.sops.secrets.authelia-session-secret.path;
storageEncryptionKeyFile = config.sops.secrets.authelia-storage-encryption.path;
ldap = {
addr = "ldap://localhost:${toString config.foehammer.services.lldap.ldap_port}";
baseDN = config.foehammer.services.lldap.base_dn;
user = "UID=authelia,OU=people,${config.foehammer.services.lldap.base_dn}";
passwordFile = config.sops.secrets.authelia-lldap-password.path;
};
};
services.lldap = {
enable = true;
url = "https://lldap.foehammer.me";
base_dn = "dc=foehammer,dc=me";
base_dn = "DC=foehammer,DC=me";
adminUserPasswordFile = config.sops.secrets.lldap-admin-password.path;
};

1
machines/lebesgue/config/secrets.nix
View file

@ -25,6 +25,7 @@
authelia-oidc-hmac = autheliaSecret;
authelia-session-secret = autheliaSecret;
authelia-storage-encryption = autheliaSecret;
authelia-lldap-password = autheliaSecret;
authelia-users = {
owner = "authelia-main";
sopsFile = ../secrets/authelia/users.yaml;

2
machines/lebesgue/config/state.nix
View file

@ -14,7 +14,7 @@
"/var/lib/caddy/.local/share/caddy"
"/var/lib/vaultwarden"
{ directory = "/var/lib/private/lldap"; user = "lldap"; group = "lldap"; mode = "0700"; }
{ directory = "/var/lib/lldap"; user = "lldap"; group = "lldap"; mode = "0700"; }
];
files = [