update keycloak

This commit is contained in:
Histausse 2023-04-20 00:03:56 +02:00
parent a36838a657
commit 3bd766d87a

View file

@ -36,6 +36,14 @@ in
}; };
initialAdminPassword = cfg.initialAdminPassword; initialAdminPassword = cfg.initialAdminPassword;
database.passwordFile = cfg.dbPasswordFile; database.passwordFile = cfg.dbPasswordFile;
# Set the permittions for the db file
system.activationScripts = {
keycloakDbFilePermission.text =
''
chmod 400 ${cfg.dbPasswordFile}
chown keycloak ${cfg.dbPasswordFile}
'';
};
database.createLocally = true; database.createLocally = true;
# TODO: enable client cert lookup: https://www.keycloak.org/server/reverseproxy#_enabling_client_certificate_lookup # TODO: enable client cert lookup: https://www.keycloak.org/server/reverseproxy#_enabling_client_certificate_lookup