snix/ops/keycloak
Ilan Joselevich 91d02d8c84 style: Switch to nixfmt from nixpkgs-fmt
Most of the ecosystem has moved to this formatter,
and many people configured their editors to autoformat it with this formatter.

Closes: https://git.snix.dev/snix/snix/issues/62
Change-Id: Icf39e7836c91fc2ae49fbe22a40a639105bfb0bd
Reviewed-on: https://cl.snix.dev/c/snix/+/30671
Reviewed-by: Florian Klink <flokli@flokli.de>
Tested-by: besadii
Autosubmit: Ilan Joselevich <personal@ilanjoselevich.com>
2025-08-10 13:40:23 +00:00
..
.gitignore feat(ops/keycloak): Check in initial Keycloak configuration 2021-12-26 16:45:59 +00:00
attributes.tf feat(ops/keycloak): configure user profile declaratively 2025-04-04 16:41:12 +00:00
buildkite.tf feat(ops/keycloak): configure Buildkite SAML 2025-05-05 12:36:30 +00:00
default.nix style: Switch to nixfmt from nixpkgs-fmt 2025-08-10 13:40:23 +00:00
forgejo.tf feat(ops/keycloak): configure Forgejo Roles 2025-05-05 12:36:30 +00:00
gerrit.tf fix(ops/keycloak): fix assigning grafana_roles 2025-05-05 12:36:30 +00:00
grafana.tf fix(ops/keycloak): fix assigning grafana_roles 2025-05-05 12:36:30 +00:00
identity_providers.tf feat(ops/keycloak): use preferred_username claim from Bornhack IdP 2025-05-04 13:32:57 +00:00
main.tf feat(ops/keycloak): configure smtp settings 2025-03-23 00:49:59 +00:00
permissions.tf feat(ops/keycloak): configure Forgejo Roles 2025-05-05 12:36:30 +00:00
README.md docs(ops/buildkite): Add documentation about this config 2022-06-06 11:05:12 +00:00

Terraform for Keycloak

This contains the Terraform configuration for deploying TVL's Keycloak instance (which lives at auth.tvl.fyi).

Secrets are needed for applying this. The encrypted file //ops/secrets/tf-keycloak.age contains export calls which should be sourced, for example via direnv, by users with the appropriate credentials.

An example direnv configuration used by tazjin is this:

# //ops/keycloak/.envrc
source_up
eval $(age --decrypt -i ~/.ssh/id_ed25519 $(git rev-parse --show-toplevel)/ops/secrets/tf-keycloak.age)