change grafana oauth config
This commit is contained in:
@@ -28,24 +28,6 @@ let
|
|||||||
grafana_admin = true # Available in Grafana v5.3 and above
|
grafana_admin = true # Available in Grafana v5.3 and above
|
||||||
'';
|
'';
|
||||||
};
|
};
|
||||||
oauth = pkgs.writeTextFile {
|
|
||||||
name = "oauth.toml";
|
|
||||||
text = ''
|
|
||||||
name = Authelia
|
|
||||||
icon = signin
|
|
||||||
client_id = grafana
|
|
||||||
client_secret = "$__file{/run/secrets/grafana-oauth-secret}"
|
|
||||||
scopes = openid profile email groups
|
|
||||||
empty_scopes = false
|
|
||||||
auth_url = https://auth.cloonar.com/api/oidc/authorization
|
|
||||||
token_url = https://auth.cloonar.com/api/oidc/token
|
|
||||||
api_url = https://auth.cloonar.com/api/oidc/userinfo
|
|
||||||
login_attribute_path = preferred_username
|
|
||||||
groups_attribute_path = groups
|
|
||||||
name_attribute_path = name
|
|
||||||
use_pkce = true
|
|
||||||
'';
|
|
||||||
};
|
|
||||||
in
|
in
|
||||||
{
|
{
|
||||||
services.grafana = {
|
services.grafana = {
|
||||||
@@ -55,8 +37,22 @@ in
|
|||||||
"auth.ldap".enabled = true;
|
"auth.ldap".enabled = true;
|
||||||
"auth.ldap".config_file = toString ldap;
|
"auth.ldap".config_file = toString ldap;
|
||||||
|
|
||||||
"auth.generic_oauth".enabled = true;
|
"auth.generic_oauth" = {
|
||||||
"auth.generic_oauth".config_file = toString oauth;
|
enabled = true;
|
||||||
|
name = "Authelia";
|
||||||
|
icon = "signin";
|
||||||
|
client_id = "grafana";
|
||||||
|
client_secret = "$__file{/run/secrets/grafana-oauth-secret}";
|
||||||
|
scopes = "openid profile email groups";
|
||||||
|
empty_scopes = false;
|
||||||
|
auth_url = "https://auth.cloonar.com/api/oidc/authorization";
|
||||||
|
token_url = "https://auth.cloonar.com/api/oidc/token";
|
||||||
|
api_url = "https://auth.cloonar.com/api/oidc/userinfo";
|
||||||
|
login_attribute_path = "preferred_username";
|
||||||
|
groups_attribute_path = "groups";
|
||||||
|
name_attribute_path = "name";
|
||||||
|
use_pkce = true;
|
||||||
|
}
|
||||||
|
|
||||||
"auth.anonymous".enabled = true;
|
"auth.anonymous".enabled = true;
|
||||||
"auth.anonymous".org_name = "Cloonar e.U.";
|
"auth.anonymous".org_name = "Cloonar e.U.";
|
||||||
|
|||||||
Reference in New Issue
Block a user