nixpkgs-suyu/nixos/modules/services/web-apps
talyz 5010f4fff9
nixos/keycloak: Use LoadCredential to load secrets
Use systemd's LoadCredential mechanism to make the secret files
available to the service.

This gets rid of the privileged part of the ExecPreStart script which
only served to copy these files and assign the correct
permissions. There's been issues with this approach when used in
combination with DynamicUser, where sometimes the user isn't created
before the ExecPreStart script runs, causing the error

install: invalid user ‘keycloak’

This should fix that issue.

Unfortunately, all of the ExecPreStart script had to be moved to
ExecStart, since credentials aren't provided to ExecPreStart. See
https://github.com/systemd/systemd/issues/19604.
2022-01-17 11:46:51 +01:00
..
atlassian
icingaweb2
ihatemoney nixos/*: add trivial defaultText for options with simple defaults 2021-12-02 22:35:04 +01:00
baget.nix baget service: init 2022-01-11 19:54:54 +03:00
bookstack.nix nixos/bookstack: fix setup service 2022-01-06 11:56:43 +01:00
calibre-web.nix
code-server.nix maintainer: add stackshadow 2021-11-01 18:47:04 +01:00
convos.nix
cryptpad.nix
dex.nix nixos/documentation: split options doc build 2022-01-02 19:46:13 +01:00
discourse.nix Merge pull request #148785 from pennae/more-option-doc-staticizing 2021-12-17 11:14:08 -05:00
discourse.xml nixos/acme: Update documentation 2021-12-26 16:49:55 +00:00
documize.nix
dokuwiki.nix nixos/dokuwiki: Drop deprecated old interface (#152676) 2022-01-16 02:38:20 +09:00
engelsystem.nix
fluidd.nix
galene.nix treewide: add defaultText to remaining options 2021-12-09 01:42:24 +01:00
gerrit.nix nixos/documentation: split options doc build 2022-01-02 19:46:13 +01:00
gotify-server.nix
grocy.nix
grocy.xml
hedgedoc.nix treewide: make option descriptions constants 2021-12-09 01:21:04 +01:00
hledger-web.nix treewide: quote urls according to rfc 0045 (#145260) 2021-11-10 11:37:56 +01:00
invidious.nix Merge pull request #148785 from pennae/more-option-doc-staticizing 2021-12-17 11:14:08 -05:00
isso.nix
jirafeau.nix nixos/documentation: split options doc build 2022-01-02 19:46:13 +01:00
jitsi-meet.nix nixos/jibri: fix & docs for enable not via meet 2021-10-25 20:46:24 -04:00
jitsi-meet.xml nixos/acme: Update documentation 2021-12-26 16:49:55 +00:00
keycloak.nix nixos/keycloak: Use LoadCredential to load secrets 2022-01-17 11:46:51 +01:00
keycloak.xml keycloak service: allow to set empty frontend URL 2022-01-16 11:41:50 +03:00
lemmy.md
lemmy.nix lemmy: systemd postgresql setup service cleanup 2021-10-30 09:16:09 +09:00
lemmy.xml
limesurvey.nix
mastodon.nix nixos/mastodon: allow '@resources' filter to mastodon-web service 2021-11-07 11:59:36 +01:00
matomo-doc.xml
matomo.nix treewide: add defaultText to remaining options 2021-12-09 01:42:24 +01:00
mattermost.nix nixos/mattermost: update service for 6.0+ 2021-12-31 23:49:00 -05:00
mediawiki.nix
miniflux.nix
moodle.nix add opcache to list of php packages 2021-11-08 10:29:16 +01:00
nextcloud.nix nixos/make-options-doc: turn relatedPackages into links 2022-01-02 19:46:13 +01:00
nextcloud.xml nextcloud23: init at 23.0.0 2021-12-02 20:53:21 +02:00
nexus.nix
node-red.nix
openwebrx.nix nixos/*: add trivial defaultText for options with simple defaults 2021-12-02 22:35:04 +01:00
peertube.nix Merge pull request #148785 from pennae/more-option-doc-staticizing 2021-12-17 11:14:08 -05:00
pgpkeyserver-lite.nix treewide: add defaultText for options using other shortcut bindings 2021-12-09 01:42:24 +01:00
pict-rs.md
pict-rs.nix
pict-rs.xml
plantuml-server.nix
plausible.nix plausible: add remote connection with iex 2021-11-09 08:15:53 -05:00
plausible.xml
powerdns-admin.nix nixos/documentation: split options doc build 2022-01-02 19:46:13 +01:00
prosody-filer.nix nixos/prosody-filer: remove usage of literalExample 2022-01-16 22:10:47 +01:00
restya-board.nix
rss-bridge.nix
selfoss.nix
shiori.nix
sogo.nix
timetagger.nix timetagger: Make enable option with mkOption 2022-01-15 09:07:54 +01:00
trilium.nix
tt-rss.nix tt-rss-module handle situations without any password 2021-12-11 15:02:27 +02:00
vikunja.nix
virtlyst.nix
whitebophir.nix
wiki-js.nix
wordpress.nix nixos/wordpress: Ensure no passwordFile if local db deployment (#148613) 2022-01-12 21:50:19 +09:00
youtrack.nix youtrack service: restart on failure 2021-12-15 01:40:00 +03:00
zabbix.nix treewide: add defaultText for options with simple cfg.* expression defaults 2021-12-09 01:14:16 +01:00