afkjdlsjdlkfajlk keycloak

flake.nix

@@ -26,7 +26,8 @@
           imports = [
             ./modules/base-stuff.nix
             ./modules/proxy.nix
-            ./modules/jitsi.nix
+            ./modules/postgres.nix
+            #./modules/jitsi.nix
             ./modules/containers
             ./modules/keycloak.nix
           ];

modules/base-stuff.nix

@@ -2,6 +2,7 @@
 {
   networking.hostName = "katzen-cafe";
 
+  networking.networkmanager.enable = true;
   networking.firewall = {
     allowedTCPPorts = [ 22 80 443 ];
   };

modules/containers/default.nix

@@ -1,7 +1,6 @@
 { pkgs, ... }:
 {
   imports = [
-    ./postgres.nix
+    #./phtanumb-wiki.nix
-    ./phtanumb-wiki.nix
   ];
 }

modules/containers/postgres.nix

@@ -1,32 +0,0 @@
-{ pkgs, ... }: 
-{
-  containers.postgres = {
-    autoStart = true;
-    localAddress = "127.0.0.1";
-    bindMounts = {
-      "/var/lib/postgresql" = {
-        hostPath = "/postgres";
-        isReadOnly = false;
-      };
-    };
-    config = { config, pkgs, ... }: {
-
-      services.postgresql = {
-        enable = true;
-        ensureUsers = [
-          {
-            name = "keycloak";
-            ensurePermissions = {
-              "DATABASE \"nextcloud\"" = "ALL PRIVILEGES";
-            };
-          }
-        ];
-        ensureDatabases = [
-          "keycloak"
-        ];
-      };
-
-      system.stateVersion = "22.11";
-    };
-  };
-}

modules/keycloak.nix

@@ -7,10 +7,19 @@
       http-port = 8097;
       proxy = "edge";
       hostname = "auth.katzen.cafe";
+      hostname-strict-backchannel = true;
     };
 
     database = {
-      createLocally = false;
+      type = "postgresql";
+      createLocally = true;
+
+      username = "keycloak";
+      passwordFile = "/run/keys/keycloakDbPw";
     };
   };
+  deployment.keys."keycloakDbPw" = {
+    keyCommand = [ "cat" "/home/jade/keys-tmp/keycloak-db" ];
+    destDir = "/run/keys/";
+  };
 }

modules/postgres.nix

@@ -0,0 +1,6 @@
+{ pkgs, ... }: 
+{
+  services.postgresql = {
+    enable = true;
+  };
+}

modules/proxy.nix

@@ -4,15 +4,18 @@
     acceptTerms = true;
     defaults = {
       email = "jade@schrottkatze.de";
-      server = "https://acme-staging-v02.api.letsencrypt.org/directory";
       webroot = "/var/lib/acme/acme-challenge";
     };
     certs = {
-      "meet.katzen.cafe" = {
+      #"meet.katzen.cafe" = {
-        group = "nginx";
+        #group = "nginx";
-        keyType = "rsa4096";
+        #keyType = "rsa4096";
-      };
+      #};
-      "wiki.phtanum-b.katzen.cafe" = {
+      #"wiki.phtanum-b.katzen.cafe" = {
+        #group = "nginx";
+        #keyType = "rsa4096";
+      #};
+      "auth.katzen.cafe" = {
         group = "nginx";
         keyType = "rsa4096";
       };
@@ -21,13 +24,13 @@
   services.nginx = {
     enable = true;
     virtualHosts = {
-      "wiki.phtanum-b.katzen.cafe" = {
+      #"wiki.phtanum-b.katzen.cafe" = {
-        forceSSL = true;
+        #forceSSL = true;
-        enableACME = true;
+        #enableACME = true;
-        locations."/" = {
+        #locations."/" = {
-          proxyPass = "http://127.0.0.1:8080";
+          #proxyPass = "http://127.0.0.1:8080";
-        };
+        #};
-      };
+      #};
       "auth.katzen.cafe" = {
         forceSSL = true;
         enableACME = true;