jawz/NixOS
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Refactor Keycloak configuration to include restart units and streamline secret management

Browse Source
This commit is contained in:
Danilo Reyes
2025-12-10 02:37:55 -06:00
parent ba41e8f804
commit 616db8006e
1 changed files with 2 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
modules/servers/keycloak.nix
View File

@@ -13,14 +13,9 @@ in
config = lib.mkIf (cfg.enable && config.my.secureHost) { config = lib.mkIf (cfg.enable && config.my.secureHost) {
sops.secrets.keycloak = { sops.secrets.keycloak = {
sopsFile = ../../secrets/env.yaml; sopsFile = ../../secrets/env.yaml;
owner = "keycloak"; restartUnits = [ "keycloak.service" ];
group = "keycloak";
};
sops.secrets.postgres-password = {
sopsFile = ../../secrets/secrets.yaml;
owner = "keycloak";
group = "keycloak";
}; };
sops.secrets.postgres-password.sopsFile = ../../secrets/secrets.yaml;
services.keycloak = { services.keycloak = {
inherit (cfg) enable; inherit (cfg) enable;
database = { database = {