60 lines
1.5 KiB
Nix
60 lines
1.5 KiB
Nix
{
|
|
config,
|
|
lib,
|
|
pkgs,
|
|
...
|
|
}:
|
|
|
|
let
|
|
inherit (lib)
|
|
mkIf
|
|
mkEnableOption
|
|
mkOption
|
|
types
|
|
;
|
|
|
|
cfg = config.programs.oidc-agent;
|
|
providerFormat = pkgs.formats.json { };
|
|
in
|
|
{
|
|
options.programs.oidc-agent = {
|
|
enable = mkEnableOption "OpenID Connect Agent";
|
|
package = mkOption {
|
|
type = types.package;
|
|
default = pkgs.oidc-agent;
|
|
description = ''
|
|
Which oidc-agent package to use
|
|
'';
|
|
};
|
|
providers = mkOption {
|
|
type = providerFormat.type;
|
|
default = { };
|
|
description = ''
|
|
Configuration of providers which contains a json array of json objects
|
|
each describing an issuer, see https://indigo-dc.gitbook.io/oidc-agent/configuration/issuers
|
|
'';
|
|
};
|
|
};
|
|
|
|
config = mkIf cfg.enable {
|
|
systemd.user.services.oidc-agent = {
|
|
unitConfig = {
|
|
Description = "OpenID Connect Agent";
|
|
Documentation = "man:oidc-agent(1)";
|
|
};
|
|
serviceConfig = {
|
|
ExecStart = "${cfg.package}/bin/oidc-agent -d --log-stderr -a %t/oidc-agent";
|
|
};
|
|
};
|
|
|
|
# environment.etc."oidc-agent/config".source = "${pkgs.oidc-agent}/etc/oidc-agent/config";
|
|
|
|
# environment.etc."oidc-agent/issuer.config.d".source =
|
|
# "${pkgs.oidc-agent}/etc/oidc-agent/issuer.config.d";
|
|
|
|
# environment.etc."oidc-agent/issuer.config".source =
|
|
# providerFormat.generate "oidc-agent-issuer.config" cfg.providers;
|
|
|
|
environment.extraInit = ''export OIDC_SOCK="$XDG_RUNTIME_DIR/oidc-agent"'';
|
|
};
|
|
}
|