nps.stacks.pocketid.enable
Whether to enable pocketid.
Type: boolean
Default:
false
Example:
true
Declared by:
nps.stacks.pocketid.containers.pocketid
Alias of services.podman.containers.pocketid
.
Type: submodule
Declared by:
nps.stacks.pocketid.env
Additional environment variables passed to the Pocket ID container See https://pocket-id.org/docs/configuration/environment-variables
Type: attribute set of (null or boolean or signed integer or string or absolute path or list of (null or boolean or signed integer or string or absolute path))
Default:
{ }
Declared by:
nps.stacks.pocketid.extraEnv
Extra environment variables to set for the container. Variables can be either set directly or sourced from a file (e.g. for secrets).
See https://pocket-id.org/docs/configuration/environment-variables
Type: attribute set of (null or boolean or signed integer or string or absolute path or (submodule))
Default:
{ }
Example:
{
FOO = "bar";
MAXMIND_LICENSE_KEY = {
fromFile = "/run/secrets/maxmind_key";
};
}
Declared by:
nps.stacks.pocketid.ldap.enableSynchronisation
Whether to sync users and groups from an the LDAP server. Requires the LLDAP stack to be enabled.
Type: boolean
Default:
config.nps.stacks.lldap.enable
Declared by:
nps.stacks.pocketid.ldap.passwordFile
The password for the LDAP user that is used when connecting to the LDAP backend.
Type: absolute path
Default:
config.nps.stacks.lldap.adminPasswordFile
Declared by:
nps.stacks.pocketid.ldap.username
The username that will be used when binding to the LDAP backend.
Type: string
Default:
config.nps.stacks.lldap.adminUsername
Declared by:
nps.stacks.pocketid.traefikIntegration.enable
Whether to setup a pocketid
middleware in Traefik.
The middleware will use the https://github.com/sevensolutions/traefik-oidc-auth plugin to secure upstream services.
Type: boolean
Default:
config.nps.stacks.traefik.enable
Declared by:
nps.stacks.pocketid.traefikIntegration.clientId
The client ID used by the Traefik OIDC middleware.
Type: string
Example:
"traefik"
Declared by:
nps.stacks.pocketid.traefikIntegration.clientSecretFile
The file containing the client secret used by the Traefik OIDC middleware.
Type: absolute path
Declared by:
nps.stacks.pocketid.traefikIntegration.encryptionSecretFile
The file containing the encryption secret used by the Traefik OIDC middleware. This should be a random secret.
See https://traefik-oidc-auth.sevensolutions.cc/docs/getting-started/middleware-configuration
Type: absolute path
Declared by: