foodogsquared/nixos-config
1
0
Fork 0
mirror of https://github.com/foo-dogsquared/nixos-config.git synced 2025-02-07 12:19:07 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

hosts/ni: disable ldap service

Browse Source 
Not yet familiar. Also causing me trouble with long login times since it
is also trying for all users in the system, it seems.
This commit is contained in:
Gabriel Arazas 2023-01-24 11:06:09 +08:00
parent eae9ea0405
commit 00bbbd8135
1 changed files with 0 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
hosts/ni/default.nix
View File

@ -57,7 +57,6 @@ in
in
getSecrets {
ssh-key = { };
"ldap/password".owner = "nslcd";
"wireguard/private-key" = {
group = config.users.users.systemd-network.group;
reloadUnits = [ "systemd-networkd.service" ];
@ -207,19 +206,6 @@ in
system.stateVersion = "22.11"; # Yes! I read the comment!
# Trying to be very portable with LDAP.
users.ldap = {
enable = true;
base = "dc=foodogsquared,dc=one";
bind = {
distinguishedName = "cn=Manager,dc=foodogsquared,dc=one";
passwordFile = config.sops.secrets."ni/ldap/password".path;
};
daemon.enable = true;
server = "ldaps://ldap.foodogsquared.one/";
};
# Setting up Wireguard as a VPN tunnel. Since this is a laptop that meant to
# be used anywhere, we're configuring Wireguard here as a "client".
#