testing keycloak

home/crow/common/optional/desktops/sway/default.nix

@@ -37,6 +37,7 @@ in {
     pulseaudio
     playerctl
     brightnessctl
+    waypipe
   ];
 
   wayland.windowManager.sway = {

hosts/nixos/HandlerOne/default.nix

@@ -53,6 +53,7 @@
       "modules/services/ntfy-sh"
       "modules/services/ollama/proxy.nix" # Just host the proxy path back to Parzival
       "modules/services/netbox"
+      "modules/services/auth-provider"
       "modules/services/matrix"
       "modules/services/flamesites"
     ])

modules/services/auth-provider/default.nix

@@ -0,0 +1,24 @@
+{pkgs, ...}: {
+  environment.etc."testing-keycloak-pass".text = "PWD";
+  services.caddy = {
+    enable = true;
+    virtualHosts."auth.wanderingcrow.net".extraConfig = ''
+      reverse_proxy http://localhost:5555
+    '';
+  };
+  services.keycloak = {
+    enable = true;
+    settings = {
+      hostname = "localhost";
+      http-port = 5555;
+      https-port = 9443;
+      http-enabled = true;
+      hostname-strict-https = false;
+    };
+    database = {
+      type = "postgresql";
+      createLocally = true;
+      passwordFile = "/etc/testing-keycloak-pass";
+    };
+  };
+}