xyno/nix-configs
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

add hedgedoc to sso

Browse source
This commit is contained in:
Lucy Hochkamp 2025-02-27 09:54:58 +01:00
parent 1c3e1d0a91
commit 18403cff70
No known key found for this signature in database
5 changed files with 53 additions and 41 deletions
Download patch file Download diff file Expand all files Collapse all files

62
flake.lock generated
View file

@ -68,11 +68,11 @@
] ]
}, },
"locked": { "locked": {
"lastModified": 1739229629, "lastModified": 1739933872,
"narHash": "sha256-zUWKsviMuelgB4PJNJuLZi/yvHnaLb1wZ9mOATjj9eM=", "narHash": "sha256-UhuvTR4OrWR+WBaRCZm4YMkvjJhZ1KZo/jRjE41m+Ek=",
"owner": "lnl7", "owner": "lnl7",
"repo": "nix-darwin", "repo": "nix-darwin",
"rev": "a36049dac55b6b00536ce8fb601ad3dd1cd8ba8c", "rev": "6ab392f626a19f1122d1955c401286e1b7cf6b53",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -177,11 +177,11 @@
"rust-overlay": "rust-overlay" "rust-overlay": "rust-overlay"
}, },
"locked": { "locked": {
"lastModified": 1738683842, "lastModified": 1740317838,
"narHash": "sha256-Igl76UYv7D/aJ7K7CbZxlBvmvzbfyNK7DOfw+Ub+M5Y=", "narHash": "sha256-Ukj9bWILZB69E1X+C+zrzNw+p0Bp9UKO2BoNGCeqLQQ=",
"owner": "SofusA", "owner": "SofusA",
"repo": "helix-pull-diagnostics", "repo": "helix-pull-diagnostics",
"rev": "3fb39042d480bb6e24b8473ff1eb31058846f55f", "rev": "73d716d71d52dd461479fab6ffd23e6612ebf4c4",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -219,11 +219,11 @@
] ]
}, },
"locked": { "locked": {
"lastModified": 1736373539, "lastModified": 1739757849,
"narHash": "sha256-dinzAqCjenWDxuy+MqUQq0I4zUSfaCvN9rzuCmgMZJY=", "narHash": "sha256-Gs076ot1YuAAsYVcyidLKUMIc4ooOaRGO0PqTY7sBzA=",
"owner": "nix-community", "owner": "nix-community",
"repo": "home-manager", "repo": "home-manager",
"rev": "bd65bc3cde04c16755955630b344bc9e35272c56", "rev": "9d3d080aec2a35e05a15cedd281c2384767c2cfe",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -256,11 +256,11 @@
}, },
"locked": { "locked": {
"dir": "nix", "dir": "nix",
"lastModified": 1737910997, "lastModified": 1739976554,
"narHash": "sha256-Q9g8erFLGov37CdtMcVm5V/u+PMtwQa7lVz4oIz43sQ=", "narHash": "sha256-iBsa9Gyc9q1pBxpvwBkZWFPx3aNZgqtqtehuTjymZ20=",
"ref": "feat-tap-overlap", "ref": "feat-tap-overlap",
"rev": "3b653692891c0231e7cc8844e142008296448217", "rev": "900ef1359ea5f632f490be2e259aa3b409f5855e",
"revCount": 912, "revCount": 942,
"type": "git", "type": "git",
"url": "https://github.com/jokesper/kmonad" "url": "https://github.com/jokesper/kmonad"
}, },
@ -324,11 +324,11 @@
}, },
"nixos-hardware": { "nixos-hardware": {
"locked": { "locked": {
"lastModified": 1738816619, "lastModified": 1740387674,
"narHash": "sha256-5yRlg48XmpcX5b5HesdGMOte+YuCy9rzQkJz+imcu6I=", "narHash": "sha256-pGk/aA0EBvI6o4DeuZsr05Ig/r4uMlSaf5EWUZEWM10=",
"owner": "NixOS", "owner": "NixOS",
"repo": "nixos-hardware", "repo": "nixos-hardware",
"rev": "2eccff41bab80839b1d25b303b53d339fbb07087", "rev": "d58f642ddb23320965b27beb0beba7236e9117b5",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -384,11 +384,11 @@
}, },
"nixpkgs-master": { "nixpkgs-master": {
"locked": { "locked": {
"lastModified": 1739229610, "lastModified": 1740394027,
"narHash": "sha256-se+XO93QNFc9Krf7pf5TvR4lKC6jh+oWV/+EomsMeZ8=", "narHash": "sha256-o5MrBsmDCm9QCoH5hMGWy9z5ZCb+TbZNp/jJqwri1s4=",
"owner": "NixOS", "owner": "NixOS",
"repo": "nixpkgs", "repo": "nixpkgs",
"rev": "ba4ca7f603ef577e16e76900e6be48329339d50e", "rev": "d7cbc931b382b2405f35b4c96497f44adf1d971e",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -400,11 +400,11 @@
}, },
"nixpkgs_2": { "nixpkgs_2": {
"locked": { "locked": {
"lastModified": 1739055578, "lastModified": 1740162160,
"narHash": "sha256-2MhC2Bgd06uI1A0vkdNUyDYsMD0SLNGKtD8600mZ69A=", "narHash": "sha256-SSYxFhqCOb3aiPb6MmN68yEzBIltfom8IgRz7phHscM=",
"owner": "NixOS", "owner": "NixOS",
"repo": "nixpkgs", "repo": "nixpkgs",
"rev": "a45fa362d887f4d4a7157d95c28ca9ce2899b70e", "rev": "11415c7ae8539d6292f2928317ee7a8410b28bb9",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -469,11 +469,11 @@
] ]
}, },
"locked": { "locked": {
"lastModified": 1739316033, "lastModified": 1740360867,
"narHash": "sha256-yHBsu5I2GOTaMzqEYXfDWzEH+pTpNKp/Ew/8x+cVCZg=", "narHash": "sha256-aT6GCM7hzfQRyuoWB0CWCk19FYXLAprHT8rbsa65gMc=",
"owner": "SEIAROTg", "owner": "SEIAROTg",
"repo": "quadlet-nix", "repo": "quadlet-nix",
"rev": "31e4175bdc1cee453f66cada21f9dd6eb90e507f", "rev": "51d1bbcedd2ae675e971f36ed0dcb90f2cb0c10f",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -515,11 +515,11 @@
] ]
}, },
"locked": { "locked": {
"lastModified": 1739209199, "lastModified": 1740374295,
"narHash": "sha256-IXemY38IgENRcnBw2/0hBkUU8dNwZr+kzrrVQd4EH/o=", "narHash": "sha256-448BUOpYTaKz3OjJeScqHMYx043LnVP0ok3FP9y14ow=",
"owner": "sofusa", "owner": "sofusa",
"repo": "roslyn-language-server", "repo": "roslyn-language-server",
"rev": "e1e9831f8fc83121f87516b00401cca409392c29", "rev": "fdc150d0881df030fc125b0a8db9d83826861fe8",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -743,11 +743,11 @@
"nixpkgs": "nixpkgs_4" "nixpkgs": "nixpkgs_4"
}, },
"locked": { "locked": {
"lastModified": 1739161281, "lastModified": 1740390943,
"narHash": "sha256-cMM5E5EzEnfQFdBurCVqCi9mhsmRCeaEJB4iskPsQ1o=", "narHash": "sha256-F8EuAkiLuDZlJ+jKaSJENVZnLz0/9T2rq7qB7vuUIak=",
"owner": "0xc000022070", "owner": "0xc000022070",
"repo": "zen-browser-flake", "repo": "zen-browser-flake",
"rev": "0e962f036e6e2a9dde28f37d80104c7ea477a801", "rev": "e8ac7b958a121a4fdb7daf14894c9c029054b9f6",
"type": "github" "type": "github"
}, },
"original": { "original": {

2
hosts/theseus/default.nix
View file

@ -211,7 +211,7 @@
# firefox # firefox
obsidian obsidian
thunderbird thunderbird
orca-slicer # unstable.orca-slicer
diebahn diebahn
vlc vlc
dolphin dolphin

16
hosts/theseus/river.nix
View file

@ -4,6 +4,16 @@ let
# url = "https://gruvbox-wallpapers.pages.dev/wallpapers/anime/wallhaven-2e2xyx.jpg"; # url = "https://gruvbox-wallpapers.pages.dev/wallpapers/anime/wallhaven-2e2xyx.jpg";
# sha256 = "1zw1a8x20bp9mn9lx18mxzgzvzi02ss57r4q1lc9f14fsmzphnlq"; # sha256 = "1zw1a8x20bp9mn9lx18mxzgzvzi02ss57r4q1lc9f14fsmzphnlq";
# }; # };
setRandomBackground = pkgs.writeScript "setBackground.sh" ''
#!/${pkgs.bash}/bin/bash
while true; do
FILENAME=''$(${pkgs.findutils}/bin/find /home/ragon/Pictures/backgrounds -type f | ${pkgs.coreutils}/bin/shuf -n 1)
${pkgs.swaybg}/bin/swaybg -i $FILENAME -m fill &
PID=$!
sleep 1200
kill $PID
done
'';
backgroundImage = "/home/ragon/Pictures/background.jpg"; backgroundImage = "/home/ragon/Pictures/background.jpg";
pow = n: i: pow = n: i:
if i == 1 then n if i == 1 then n
@ -588,7 +598,8 @@ label:focus {
timeout 300 'swaylock -i ${backgroundImage}' \ timeout 300 'swaylock -i ${backgroundImage}' \
timeout 600 'wlopm --off \*' resume 'wlopm --on \*' \ timeout 600 'wlopm --off \*' resume 'wlopm --on \*' \
before-sleep 'swaylock -i ${backgroundImage}' & before-sleep 'swaylock -i ${backgroundImage}' &
swaybg -i ${backgroundImage} & # swaybg -i ${backgroundImage} &
${setRandomBackground} &
shikane & shikane &
${pkgs.mako}/bin/mako & ${pkgs.mako}/bin/mako &
# iwgtk likes to crash when restarting iwd # iwgtk likes to crash when restarting iwd
@ -598,7 +609,8 @@ label:focus {
signal-desktop & signal-desktop &
element-desktop & element-desktop &
evolution & evolution &
${pkgs.appimage-run}/bin/appimage-run /home/ragon/AppImages/KeePassXC-2.8.0-snapshot-x86_64.AppImage & # ${pkgs.appimage-run}/bin/appimage-run /home/ragon/AppImages/KeePassXC-2.8.0-snapshot-x86_64.AppImage &
keepassxc &
''; '';
}; };
# services.wired = { # services.wired = {

14
nixos-modules/services/hedgedoc.nix
View file

@ -25,16 +25,16 @@ in
allowFreeURL = true; allowFreeURL = true;
email = false; email = false;
oauth2 = { oauth2 = {
providerName = "authentik";
clientID = "$CLIENT_ID"; clientID = "$CLIENT_ID";
clientSecret = "$CLIENT_SECRET"; clientSecret = "$CLIENT_SECRET";
providerName = "xyno.systems SSO"; scope = "openid email profile";
authorizationURL = "https://sso.xyno.systems/api/oidc/authorize"; userProfileURL = "https://auth.hailsatan.eu/application/o/userinfo/";
tokenURL = "https://sso.xyno.systems/api/oidc/token"; tokenURL = "https://auth.hailsatan.eu/application/o/token/";
userProfileURL = "https://sso.xyno.systems/api/oidc/userinfo"; authorizationURL = "https://auth.hailsatan.eu/application/o/authorize/";
scope = "openid profile email"; userProfileUsernameAttr = "preferred_username";
userProfileUsernameAttr = "sub";
userProfileEmailAttr = "email";
userProfileDisplayNameAttr = "name"; userProfileDisplayNameAttr = "name";
userProfileEmailAttr = "email";
}; };
domain = "${cfg.domain}"; domain = "${cfg.domain}";
db = { db = {

BIN
secrets/hedgedocSecret.age
View file

Binary file not shown.