revamped flake.nix, removed homelab specific modulesstaging

1 files changed, 0 insertions, 55 deletions

diff --git a/os/srv/lldap.nix b/os/srv/lldap.nix
deleted file mode 100644
index 6755dfe..0000000
--- a/os/srv/lldap.nix
+++ /dev/null
@@ -1,55 +0,0 @@
-{
-  config,
-  lib,
-  masterDomain,
-  ...
-}:
-let
-  cfg = config.os.srv.lldap;
-  computedBaseDN = lib.concatStringsSep "," (
-    map (domainPart: "dc=${domainPart}") (lib.splitString "." masterDomain)
-  );
-in
-{
-  options.os.srv.lldap.enable = lib.mkEnableOption "enables lldap scanning";
-  config = lib.mkIf cfg.enable {
-    assertions = [
-      {
-        assertion = config.os.srv.sops.enable;
-        message = "Required for password secure password storing";
-      }
-      {
-        assertion = config.os.core.network.enableFirewall;
-        message = "Requires firewall";
-      }
-    ];
-
-    sops.secrets = {
-      "lldap/password" = {
-        owner = "lldap";
-        group = "lldap";
-      };
-      "lldap/env_file" = {
-        owner = "lldap";
-        group = "lldap";
-      };
-    };
-
-    services.lldap = {
-      enable = true;
-      settings = {
-        ldap_base_dn = computedBaseDN;
-        http_host = "127.0.0.1";
-        http_url = "https://lldap.${masterDomain}";
-        ldap_user_email = "adikro@disroot.org";
-        ldap_user_pass_file = config.sops.secrets."lldap/password".path;
-        silenceForceUserPassResetWarning = true;
-      };
-      environmentFile = config.sops.secrets."lldap/env_file".path;
-    };
-
-    networking.firewall.extraInputRules = ''
-      ip saddr 10.0.0.0/24 tcp dport 3890 accept
-    '';
-  };
-}