diff --git a/hosts/ami/default.nix b/hosts/ami/default.nix index e8ffa08..a03b0a3 100644 --- a/hosts/ami/default.nix +++ b/hosts/ami/default.nix @@ -15,7 +15,6 @@ ./borg.nix ./disk-config.nix ./forgejo.nix - ./keycloak.nix ./murmur.nix ./msmtp.nix ./upgrade.nix diff --git a/hosts/ami/keycloak.nix b/hosts/ami/keycloak.nix deleted file mode 100644 index d214a9f..0000000 --- a/hosts/ami/keycloak.nix +++ /dev/null @@ -1,41 +0,0 @@ -{ - config, - pkgs, - ... -}: let - port = 11328; -in { - age.secrets.keycloak-db-pass.file = ../../secrets/keycloak-db-pass.age; - - services.keycloak = { - enable = true; - package = pkgs.unstable.keycloak; - database.passwordFile = config.age.secrets.keycloak-db-pass.path; - - settings = { - hostname = "https://kc.buffet.sh/"; - http-port = port; - proxy = "edge"; - }; - }; - - services.nginx = { - enable = true; - - recommendedGzipSettings = true; - recommendedOptimisation = true; - recommendedProxySettings = true; - recommendedTlsSettings = true; - - virtualHosts."kc.buffet.sh" = { - useACMEHost = "buffet.sh"; - forceSSL = true; - - locations = { - "/" = { - proxyPass = "http://localhost:${toString port}"; - }; - }; - }; - }; -} diff --git a/secrets.nix b/secrets.nix index e15fbb6..f478d4d 100644 --- a/secrets.nix +++ b/secrets.nix @@ -4,7 +4,6 @@ in { "secrets/bitwarden.age".publicKeys = [buffet]; "secrets/borgpassword.age".publicKeys = [buffet]; "secrets/hetzner-dns.age".publicKeys = [buffet]; - "secrets/keycloak-db-pass.age".publicKeys = [buffet]; "secrets/kitchen-runner-token.age".publicKeys = [buffet]; "secrets/msmtppassword.age".publicKeys = [buffet]; } diff --git a/secrets/keycloak-db-pass.age b/secrets/keycloak-db-pass.age deleted file mode 100644 index 43ed0d5..0000000 --- a/secrets/keycloak-db-pass.age +++ /dev/null @@ -1,5 +0,0 @@ -age-encryption.org/v1 --> ssh-ed25519 zRvPWg dBE7+zBtxSbFggJdrs22PDU/rMaVJ8tV6FLPmSwOzA0 -mAmmY0WFFzntI+uVOFaDZixtBPkAflllANFlcupM8sc ---- 8rVOupXTyOinTaMRntA+rBjr2xZ9FT0xzmNQReEZb1Q -Ñr84¦y„ó% Ó„Ñ ÓLkº|½ª®]è~£:œö–‹n¬ëÇÞÂd½mC2£\­‘‘$¯Áör†#‹u°ì•D)PöBàÀm-R¹Ukƒ°0Æ…Cò$`ê|U \ No newline at end of file