wymiller/nix-config-v2
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

changed sso parameters

Browse Source
This commit is contained in:
Wyatt J. Miller
2026-05-10 14:42:08 -04:00
parent 8b7c4fd871
commit 4e0a2fc86f
1 changed files with 11 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
modules/machine/yshtola/configuration.nix
View File

@@ -17,8 +17,10 @@
# After deploying Mastodon, register an OAuth application at
# https://social.wyattjmiller.com/settings/applications and write the
# client ID / secret to these paths (chmod 400, owned by the tuwunel user):
mastodonOauthClientIdFile = "/var/lib/tuwunel/mastodon-oauth-client-id";
mastodonOauthClientSecretFile = "/var/lib/tuwunel/mastodon-oauth-client-secret";
mastodonOauthClientIdFile = "/var/lib/private/tuwunel/matrix-oauth-client-id";
mastodonOauthClientSecretFile = "/var/lib/private/tuwunel/matrix-oauth-client-secret";
mastodonOauthClientId = builtins.readFile mastodonOauthClientIdFile;
mastodonOauthClientSecret = builtins.readFile mastodonOauthClientSecretFile;
in {
imports = [
../../pwrMgmt
@@ -200,10 +202,13 @@ in {
{
brand = "Mastodon";
issuer_url = "https://${mastodonFqdn}";
id = "oidc-mastodon";
client_id = mastodonOauthClientIdFile;
client_secret = mastodonOauthClientSecretFile;
scope = ["openid" "read:accounts"];
id = mastodonOauthClientId;
callback_url = "https://${matrixFqdn}/_matrix/client/v3/login/sso/callback/${mastodonOauthClientId}";
discovery_url = "https://${mastodonFqdn}/.well-known/oauth-authorization-server";
client_id = mastodonOauthClientId;
client_secret = mastodonOauthClientSecret;
scope = ["profile"];
userid_claims = ["preferred_username"];
}
];
};