Use near-native writefreely module
... we can use the official one when nixOS/nixpkgs#319138 lands
This commit is contained in:
parent
2326c903c0
commit
6e88c391f9
3 changed files with 222 additions and 129 deletions
|
@ -11,7 +11,7 @@ in
|
|||
# traefik
|
||||
cloud.traefik.hosts.writefreely-dtth = { inherit host port; };
|
||||
|
||||
sops.secrets."writefreely-dtth" = { owner = user; };
|
||||
sops.secrets."writefreely-oauth-secret" = { owner = user; };
|
||||
|
||||
users.users.${user} = {
|
||||
isSystemUser = true;
|
||||
|
@ -53,22 +53,24 @@ in
|
|||
monetization = false;
|
||||
};
|
||||
|
||||
"oauth.generic" = {
|
||||
client_id = "rpoTTr2Wz0h4EgOSCHe0G85O8DCQDMup7JW9U9fV";
|
||||
host = "https://auth.dtth.ch";
|
||||
display_name = "DTTH";
|
||||
token_endpoint = "/application/o/token/";
|
||||
inspect_endpoint = "/application/o/userinfo/";
|
||||
auth_endpoint = "/application/o/authorize/";
|
||||
scope = "email openid profile";
|
||||
map_user_id = "nickname";
|
||||
map_username = "preferred_username";
|
||||
map_display_name = "name";
|
||||
allow_registration = true;
|
||||
};
|
||||
"oauth.generic" = { };
|
||||
};
|
||||
|
||||
oauth = {
|
||||
enable = true;
|
||||
clientId = "rpoTTr2Wz0h4EgOSCHe0G85O8DCQDMup7JW9U9fV";
|
||||
clientSecretFile = config.sops.secrets."writefreely-oauth-secret".path;
|
||||
host = "https://auth.dtth.ch";
|
||||
displayName = "DTTH";
|
||||
tokenEndpoint = "/application/o/token/";
|
||||
inspectEndpoint = "/application/o/userinfo/";
|
||||
authEndpoint = "/application/o/authorize/";
|
||||
scopes = [ "email" "openid" "profile" ];
|
||||
mapUserId = "nickname";
|
||||
mapUsername = "preferred_username";
|
||||
mapDisplayName = "name";
|
||||
};
|
||||
|
||||
extraSettingsFile = config.sops.secrets."writefreely-dtth".path;
|
||||
|
||||
database.type = "sqlite3";
|
||||
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue