servius/dotfiles
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

feat: Added stuff

Browse Source
This commit is contained in:
uttarayan21
2025-02-27 22:26:51 +05:30
parent a4235cbbf4
commit ec02c29787
3 changed files with 36 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
nixos/mirai/services/authelia.nix
View File

@@ -35,14 +35,14 @@
domain = "darksailor.dev";
policy = "one_factor";
}
{
domain = "cloud.darksailor.dev";
policy = "one_factor";
}
{
domain = "code.darksailor.dev";
policy = "one_factor";
}
# {
# domain = "cloud.darksailor.dev";
# policy = "one_factor";
# }
# {
# domain = "code.darksailor.dev";
# policy = "one_factor";
# }
# {
# domain = "media.darksailor.dev";
# policy = "one_factor";

7
nixos/mirai/services/default.nix
View File

@@ -6,10 +6,11 @@
./llama.nix
./minecraft.nix
./tailscale.nix
./vscode.nix
./seafile.nix
# ./syncthing.nix
# ./polaris.nix
# ./seafile.nix
# ./syncthing.nix
# ./vscode.nix
# ./nextcloud.nix
# ./navidrome.nix
# ./ldap.nix

26
nixos/mirai/services/seafile.nix
View File

@@ -18,11 +18,11 @@
ENABLE_REMOTE_USER_AUTHENTICATION = True
# Optional, HTTP header, which is configured in your web server conf file,
# used for Seafile to get user's unique id, default value is 'HTTP_REMOTE_USER'.
REMOTE_USER_HEADER = 'HTTP_EMAIL'
REMOTE_USER_HEADER = 'REMOTE_USER'
# Optional, when the value of HTTP_REMOTE_USER is not a valid email address，
# Seafile will build a email-like unique id from the value of 'REMOTE_USER_HEADER'
# and this domain, e.g. user1@example.com.
REMOTE_USER_DOMAIN = 'uttarayan.me'
# REMOTE_USER_DOMAIN = 'uttarayan.me'
# Optional, whether to create new user in Seafile system, default value is True.
# If this setting is disabled, users doesn't preexist in the Seafile DB cannot login.
# The admin has to first import the users from external systems like LDAP.
@@ -42,8 +42,30 @@
uri /api/authz/forward-auth
copy_headers Remote-User Remote-Groups Remote-Email Remote-Name
}
reverse_proxy unix//run/seahub/gunicorn.sock
'';
};
authelia = {
instances.darksailor = {
settings = {
access_control = {
rules = [
{
domain = "cloud.darksailor.dev";
policy = "one_factor";
}
{
domain = "cloud.darksailor.dev";
policy = "bypass";
resources = [
"^/(api2|seafhttp)([/?].*)?$"
];
}
];
};
};
};
};
};
}