X-Git-Url: https://git.immae.eu/?a=blobdiff_plain;ds=sidebyside;f=modules%2Fprivate%2Fdatabases%2Fopenldap%2Fdefault.nix;fp=modules%2Fprivate%2Fdatabases%2Fopenldap%2Fdefault.nix;h=d35aca08de4a51858ea979ba33d961145e078121;hb=4c4652aabf2cb3ac8b40f2856eca07a1df9c27e0;hp=f4851b5f885a09d3d98ff6994526619b873f2897;hpb=da30ae4ffdd153a1eb32fb86f9ca9a65aa19e4e2;p=perso%2FImmae%2FConfig%2FNix.git diff --git a/modules/private/databases/openldap/default.nix b/modules/private/databases/openldap/default.nix index f4851b5..d35aca0 100644 --- a/modules/private/databases/openldap/default.nix +++ b/modules/private/databases/openldap/default.nix @@ -85,29 +85,26 @@ in }; config = lib.mkIf cfg.enable { - secrets.keys = [ - { - dest = "ldap/password"; + secrets.keys = { + "ldap/password" = { permissions = "0400"; user = "openldap"; group = "openldap"; text = "rootpw ${cfg.rootPw}"; - } - { - dest = "ldap/access"; + }; + "ldap/access" = { permissions = "0400"; user = "openldap"; group = "openldap"; text = builtins.readFile cfg.accessFile; - } - { - dest = "ldap"; + }; + "ldap" = { permissions = "0500"; user = "openldap"; group = "openldap"; isDir = true; - } - ]; + }; + }; users.users.openldap.extraGroups = [ "keys" ]; networking.firewall.allowedTCPPorts = [ 636 389 ];