histausse/nixos-modules
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

test openid redirection

Browse source
This commit is contained in:
Histausse 2023-04-24 21:55:30 +02:00
parent fa4f5c2d75
commit 63e49bc739
1 changed files with 14 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

18
pp-gitea.nix
View file

@ -12,10 +12,15 @@ in
example = "git.example.com";
description = "The domain of the server";
};
disableRegistration = mkOption {
openIdEnable = mkOption {
type = types.bool;
default = true;
description = "Must be set to `false` for the initial deployement";
default = false;
description = "If OpenId provider is setup and should be used exclusively.";
};
openIdClientName = mkOption {
type = types.str;
default = "";
description = "The name (id) of the openId client to use exclusively.";
};
customPackage = mkOption {
type = types.package;
@ -38,8 +43,10 @@ in
services.gitea.stateDir = "/var/lib/gitea"; # default value
services.gitea.enable = true;
services.gitea.rootUrl = "https://${cfg.domain}/";
services.gitea.settings.service.DISABLE_REGISTRATION = lib.mkForce cfg.disableRegistration; # Only set after initial deploy
services.gitea.settings.session.COOKIE_SECURE = lib.mkForce true; # Why do I need to override this???
services.gitea.settings.service.DISABLE_REGISTRATION = lib.mkForce (!cfg.openIdEnable);
services.gitea.settings.service.ALLOW_ONLY_EXTERNAL_REGISTRATION = cfg.openIdEnable;
services.gitea.settings.openid.ENABLE_OPENID_SIGNUP = cfg.openIdEnable;
services.gitea.lfs.enable = true;
services.gitea.domain = cfg.domain;
# services.gitea.database.type = "postgres"; # Default is sqlite3, probably better for a small instance
@ -92,6 +99,9 @@ in
proxy_pass_request_headers on;
'';
};
lib.mkIf cfg.openIdEnable {
locations."/user/login".globalRedirect = "$host/${cfg.openIdClientName}";
};
};
};
};