maurice/snix
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
snix/ops/modules
History
Florian Klink e20ff4cb60 fix(ops/keycloak): fix assigning grafana_roles 
keycloak_openid_user_client_role_protocol_mapper.grafana_role_mapper was
missing. It is configured to make the client roles for this Application
(and only those for this application) available in the grafana_roles
claim.

We can also disable full scope, as we're not interested in other role
mappings.

The Terraform files are a bit reorganized, everything configuring the
Grafana client lives in grafana.tf (and vice-versa for Forgejo,
Buildkite and Gerrit). The only thing left in permissions.tf is global
groups, their memberships and mappings.

Change-Id: I37b0755f4f8658518083353ec6cc0193e805d5c2
Reviewed-on: https://cl.snix.dev/c/snix/+/30476
Tested-by: besadii
Autosubmit: Florian Klink <flokli@flokli.de>
Reviewed-by: Jonas Chevalier <zimbatm@zimbatm.com>
2025-05-05 12:36:30 +00:00
..
o11y fix(ops/keycloak): fix assigning grafana_roles 2025-05-05 12:36:30 +00:00
www feat(ops/www/cl.snix.dev): deploy buildkite-api-proxy 2025-05-03 22:37:12 +00:00
.skip-subtree refactor(ops): Split //ops/nixos into different locations 2021-04-11 22:18:22 +00:00
archivist.nix chore(ops): move archivist machine to ops and contrib 2025-03-20 12:21:44 +00:00
clbot.nix refactor(ops/clbot): use escapeSystemdPath 2025-03-10 15:09:14 +00:00
default.nix style: format entire depot with nixpkgs-fmt 2022-01-31 16:11:53 +00:00
forgejo.nix fix(ops/modules/forgejo): disable native sign-in 2025-03-25 14:56:20 +00:00
gerrit-autosubmit.nix feat(*): initialize new Snix infrastructure 2025-03-17 17:15:07 +00:00
harmonia.nix feat(ops): Deploy harmonia on cache.snix.dev 2025-03-31 12:39:21 +00:00
hetzner-cloud.nix feat(*): initialize new Snix infrastructure 2025-03-17 17:15:07 +00:00
known-hosts.nix feat(*): initialize new Snix infrastructure 2025-03-17 17:15:07 +00:00
monorepo-gerrit.nix chore(gerrit): Disable code-owners on meta/config branch. 2025-05-04 17:42:24 +00:00
README.md refactor(ops): Split //ops/nixos into different locations 2021-04-11 22:18:22 +00:00
restic.nix feat(*): initialize new Snix infrastructure 2025-03-17 17:15:07 +00:00
snix-buildkite.nix fix(ops/modules/buildkite): merge tags appropriately 2025-03-17 17:16:18 +00:00

README.md

NixOS modules

This folder contains various NixOS modules shared by our NixOS configurations.

It is not read by readTree.