nixos-config/machines/massicot/kanidm-provision.nix

{
  enable = true;
  autoRemove = true;
  groups = {
    forgejo-access = {
      members = [ "xin" ];
    };
    gts-users = {
      members = [ "xin" ];
    };
    ocis-users = {
      members = [ "xin" ];
    };
    linux_users = {
      members = [ "xin" ];
    };
    hedgedoc-users = {
      members = [ "xin" ];
    };
    immich-users = {
      members = [ "xin" "zhuo" "ycm" ];
    };
    grafana-superadmins = {
      members = [ "xin" ];
    };
    grafana-admins = {
      members = [ "xin" ];
    };
    grafana-editors = {
      members = [ "xin" ];
    };
    grafana-users = {
      members = [ "xin" ];
    };
    miniflux-users = {
      members = [ "xin" ];
    };
  };
  persons = {
    xin = {
      displayName = "Xinyang Li";
      mailAddresses = [ "lixinyang411@gmail.com" ];
    };

    zhuo = {
      displayName = "Zhuo";
      mailAddresses = [ "13681104320@163.com" ];
    };

    ycm = {
      displayName = "Chunming";
      mailAddresses = [ "chunmingyou@gmail.com" ];
    };
  };
  systems.oauth2 = {
    forgejo = {
      displayName = "ForgeJo";
      originUrl = "https://git.xinyang.life/";
      originLanding = "	https://git.xinyang.life/user/oauth2/kandim";
      allowInsecureClientDisablePkce = true;
      scopeMaps = {
        forgejo-access = [ "openid" "email" "profile" "groups" ];
      };
    };
    gts = {
      displayName = "GoToSocial";
      originUrl = "https://xinyang.life/";
      allowInsecureClientDisablePkce = true;
      scopeMaps = {
        gts-users = [ "openid" "email" "profile" "groups" ];
      };
    };
    owncloud = {
      displayName = "ownCloud";
      originUrl = "https://home.xinyang.life:9201/";
      public = true;
      scopeMaps = {
        ocis-users = [ "openid" "email" "profile" ];
      };
    };
    hedgedoc = {
      displayName = "HedgeDoc";
      originUrl = "https://docs.xinyang.life/";
      originLanding = "https://docs.xinyang.life/auth/oauth2";
      allowInsecureClientDisablePkce = true;
      scopeMaps = {
        hedgedoc-users = [ "openid" "email" "profile" ];
      };
    };
    immich-mobile = {
      displayName = "Immich";
      originUrl = "https://immich.xinyang.life:8000/api/oauth/mobile-redirect/";
      allowInsecureClientDisablePkce = true;
      scopeMaps = {
        immich-users = [ "openid" "email" "profile" ];
      };
    };
    miniflux = {
      displayName = "Miniflux";
      originUrl = "https://rss.xinyang.life/";
      scopeMaps = {
        miniflux-users = [ "openid" "email" "profile" ];
      };
    };
    grafana = {
      displayName = "Grafana";
      originUrl = "https://grafana.xinyang.life/";
      scopeMaps = {
        grafana-users = [ "openid" "email" "profile" "groups" ];
      };
      claimMaps = {
        grafana_role = {
          joinType = "array";
          valuesByGroup = {
            grafana-superadmins = [ "GrafanaAdmin" ];
            grafana-admins = [ "Admin" ];
            grafana-editors = [ "Editor" ];
          };
        };
      };
    };
  };
}