From e8c332f5bcd693bf6f97e0dee5b40238be1234a9 Mon Sep 17 00:00:00 2001
From: TheWanderingCrow <contact@wanderingcrow.net>
Date: Tue, 14 Oct 2025 15:36:27 -0400
Subject: [PATCH] testing keycloak

---
 .../common/optional/desktops/sway/default.nix |  1 +
 hosts/nixos/HandlerOne/default.nix            |  1 +
 modules/services/auth-provider/default.nix    | 24 +++++++++++++++++++
 3 files changed, 26 insertions(+)
 create mode 100644 modules/services/auth-provider/default.nix

diff --git a/home/crow/common/optional/desktops/sway/default.nix b/home/crow/common/optional/desktops/sway/default.nix
index ffa620b..a844d95 100644
--- a/home/crow/common/optional/desktops/sway/default.nix
+++ b/home/crow/common/optional/desktops/sway/default.nix
@@ -37,6 +37,7 @@ in {
     pulseaudio
     playerctl
     brightnessctl
+    waypipe
   ];
 
   wayland.windowManager.sway = {
diff --git a/hosts/nixos/HandlerOne/default.nix b/hosts/nixos/HandlerOne/default.nix
index dc0eb79..93dcd2e 100644
--- a/hosts/nixos/HandlerOne/default.nix
+++ b/hosts/nixos/HandlerOne/default.nix
@@ -53,6 +53,7 @@
       "modules/services/ntfy-sh"
       "modules/services/ollama/proxy.nix" # Just host the proxy path back to Parzival
       "modules/services/netbox"
+      "modules/services/auth-provider"
       "modules/services/matrix"
       "modules/services/flamesites"
     ])
diff --git a/modules/services/auth-provider/default.nix b/modules/services/auth-provider/default.nix
new file mode 100644
index 0000000..1776fc5
--- /dev/null
+++ b/modules/services/auth-provider/default.nix
@@ -0,0 +1,24 @@
+{pkgs, ...}: {
+  environment.etc."testing-keycloak-pass".text = "PWD";
+  services.caddy = {
+    enable = true;
+    virtualHosts."auth.wanderingcrow.net".extraConfig = ''
+      reverse_proxy http://localhost:5555
+    '';
+  };
+  services.keycloak = {
+    enable = true;
+    settings = {
+      hostname = "localhost";
+      http-port = 5555;
+      https-port = 9443;
+      http-enabled = true;
+      hostname-strict-https = false;
+    };
+    database = {
+      type = "postgresql";
+      createLocally = true;
+      passwordFile = "/etc/testing-keycloak-pass";
+    };
+  };
+}