change grafana oauth config

This commit is contained in:
2023-08-19 12:03:26 +02:00
parent 22fef6fca8
commit 93793616c0

View File

@@ -30,6 +30,7 @@ let
}; };
in in
{ {
systemd.services.grafana.script = lib.mkBefore "export GF_AUTH_GENERIC_OAUTH_CLIENT_SECRET=$(cat /run/secrets/grafana-oauth-secret)";
services.grafana = { services.grafana = {
enable = true; enable = true;
settings = { settings = {
@@ -42,7 +43,6 @@ in
name = "Authelia"; name = "Authelia";
icon = "signin"; icon = "signin";
client_id = "grafana"; client_id = "grafana";
client_secret = "$__file{/run/secrets/grafana-oauth-secret}";
scopes = "openid profile email groups"; scopes = "openid profile email groups";
empty_scopes = false; empty_scopes = false;
auth_url = "https://auth.cloonar.com/api/oidc/authorization"; auth_url = "https://auth.cloonar.com/api/oidc/authorization";