tbarnouin/nixos-hypervisor
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Ajout config OAuth pour grafana

Browse source
This commit is contained in:
Théo Barnouin 2024-09-25 12:56:59 +02:00
parent 1f446740cd
commit fefb6ce762
2 changed files with 38 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

19
services/grafana/default.nix
View file

@ -23,6 +23,25 @@ in
root_url = "https://logs.le43.eu";
serve_from_sub_path = false;
};
auth = {
signout_redirect_url = https://authentik.le43.eu/application/o/grafana/end-session/;
oauth_auto_login = true;
};
"oauth.generic_oauth" = {
name = "authentik";
enabled = true;
client_id = "9HV82G8F92Jcbw4nP8eppMcPpLcAw5uYpejfReLy";
client_secret = "\$__file{/run/secrets/grafana/client_secret}";
scopes = [
"openid"
"email"
"profile"
];
auth_url = "https://authentik.le43.eu/application/o/authorize/";
token_url = "https://authentik.le43.eu/application/o/token/";
api_url = "https://authentik.le43.eu/application/o/userinfo/";
role_attribute_path = "contains(groups, 'admin') && 'Admin' || 'Viewer'";
};
};
};
services.prometheus = {