This commit is contained in:
Chris Kruining 2025-09-17 21:40:37 +02:00
parent 59f764a9ee
commit 339c4da55d
Signed by: chris
SSH key fingerprint: SHA256:nG82MUfuVdRVyCKKWqhY+pCrbz9nbX6uzUns4RKa1Pg
2 changed files with 42 additions and 56 deletions

View file

@ -37,46 +37,4 @@ in
nixosModule = lib.modules.importApply ./roles/peer.nix (instanceArgs // { inherit pkgs; });
};
};
perMachine = { instances, machine, ... }: {
nixosModule = { config, ... }: {
config = {
clan.core.vars.generators.zitadel = {
share = false;
files.masterKey = { deploy = true; secret = true; };
# https://zitadel.com/docs/self-hosting/manage/configure#masterkey
# The master key has to be 32 bytes
script = ''
head -c 32 /dev/urandom > $out/masterKey
'';
};
services.zitadel = {
enable = true;
masterKeyFile = config.clan.core.vars.generators.zitadel.masterKey.path;
settings = {
Port = 9092;
ExternalDomain = "auth.amarth.cloud";
ExternalPort = 443;
ExternalSecure = true;
Metrics.Type = "otel";
Tracing.Type = "otel";
Telemetry.Enabled = true;
SystemDefaults = {
PasswordHasher.Hasher.Algorithm = "argon2id";
SecretHasher.Hasher.Algorithm = "argon2id";
};
};
};
};
};
};
}