From ee82720db0e65954b9c25842211abc6121ef8383 Mon Sep 17 00:00:00 2001
From: Jean-Marie 'Histausse' Mineau <histausse@protonmail.com>
Date: Sun, 16 Mar 2025 00:45:02 +0100
Subject: [PATCH] change to keycloak 24

---
 pp-forgejo.nix  | 2 +-
 pp-keycloak.nix | 2 --
 2 files changed, 1 insertion(+), 3 deletions(-)

diff --git a/pp-forgejo.nix b/pp-forgejo.nix
index 87294cf..c16c260 100644
--- a/pp-forgejo.nix
+++ b/pp-forgejo.nix
@@ -23,7 +23,7 @@ in
       description = "The name (id) of the openId client to use exclusively.";
     };
     dbPasswordFile = mkOption {
-      type = types.str;
+      type = types.path;
       default = "/etc/forgejo_db_pwd";
       description = "The file containing the database password. Be sure to secure it.";
     };
diff --git a/pp-keycloak.nix b/pp-keycloak.nix
index f24019d..5357d28 100644
--- a/pp-keycloak.nix
+++ b/pp-keycloak.nix
@@ -31,8 +31,6 @@ in
       http-host = "127.0.0.1";
       http-port = 8080;
       https-port = 8443;
-      proxy = "edge"; # TODO: change to reencrypt or passthrough
-      hostname-strict-backchannel = true;
     };
     services.keycloak.initialAdminPassword = cfg.initialAdminPassword;
     services.keycloak.database.passwordFile = cfg.dbPasswordFile;