From 0ed06f311c997f43369270e76db66b8f6956511c Mon Sep 17 00:00:00 2001 From: Ruben Hensen Date: Sun, 15 Mar 2026 21:32:23 +0100 Subject: [PATCH] Change authentik dns rubenhensen.nl --- dns/domains/rubenhensen.nl.yaml | 4 ++-- nix-infra-machine/nodes/node001.nix | 5 ++++- 2 files changed, 6 insertions(+), 3 deletions(-) diff --git a/dns/domains/rubenhensen.nl.yaml b/dns/domains/rubenhensen.nl.yaml index 16de918..44f7c35 100644 --- a/dns/domains/rubenhensen.nl.yaml +++ b/dns/domains/rubenhensen.nl.yaml @@ -21,8 +21,8 @@ records: content: "@" - name: "authentik" expire: 86400 - type: CNAME - content: "@" + type: A + content: "62.41.87.114" - name: "argocd" expire: 86400 type: CNAME diff --git a/nix-infra-machine/nodes/node001.nix b/nix-infra-machine/nodes/node001.nix index 0119e31..c95f5bb 100644 --- a/nix-infra-machine/nodes/node001.nix +++ b/nix-infra-machine/nodes/node001.nix @@ -160,7 +160,10 @@ in filter.verify = "(&(objectClass=user)(|(mail=*?*)(cn=*?*)))"; filter.expand = "(&(objectClass=group)(cn=?))"; attribute.name = "cn"; + attribute.type = "class"; attribute.email = "mail"; + attribute.secret = "userPassword"; + attribute.groups = "memberOf"; attribute.description = "displayName"; }; @@ -255,7 +258,7 @@ in systemd.services.nginx.serviceConfig.LimitNOFILE = 65536; systemd.services.nginx.preStart = lib.mkBefore '' mkdir -p /run/nginx - test -f /run/nginx/k8s-upstream.conf || printf 'upstream k8s_tls {\n server 127.0.0.1:443;\n}\n\nupstream k8s_ldap {\n server 127.0.0.1:3389;\n}\n' > /run/nginx/k8s-upstream.conf + test -f /run/nginx/k8s-upstream.conf || printf 'upstream k8s_tls {\n server 127.0.0.1:1;\n}\n\nupstream k8s_ldap {\n server 127.0.0.1:1;\n}\n' > /run/nginx/k8s-upstream.conf test -f /run/nginx/k8s-http-upstream.conf || printf 'upstream k8s_http {\n server 127.0.0.1:80;\n}\n' > /run/nginx/k8s-http-upstream.conf '';