fixup

sbulav · Nov 18, 2024 · 5d073ae · 5d073ae
1 parent 3f99e54
commit 5d073ae
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 5 deletions.
diff --git a/nix/modules/nixos/containers/nextcloud/default.nix b/nix/modules/nixos/containers/nextcloud/default.nix
@@ -106,6 +106,7 @@ in {
             enable = true;
             package = inputs.stable.legacyPackages.x86_64-linux.nextcloud30;
             hostName = "${cfg.host}";
+            secretFile = "/run/secrets/run/secrets/nextcloud-oidc-login-client-secret";
 
             https = true;
             maxUploadSize = "16G";
@@ -168,7 +169,6 @@ in {
               lost_password_link = "disabled";
               oidc_login_provider_url = "https://authelia.sbulav.ru";
               oidc_login_client_id = "nextcloud";
-              oidc_login_client_secret = "$(cat /run/secrets/nextcloud-oidc-login-client-secret)";
               oidc_login_auto_redirect = false;
               oidc_login_end_session_redirect = false;
               oidc_login_button_text = "Log in with Authelia";
@@ -191,7 +191,7 @@ in {
               oidc_login_webdav_enabled = false;
               oidc_login_password_authentication = false;
               oidc_login_public_key_caching_time = 86400;
-              oidc_login_min_time_between_jwks_requests = 10;
+              oidc_login_min_time_between_jwks_requests = 20;
               oidc_login_well_known_caching_time = 86400;
               oidc_login_update_avatar = false;
               oidc_login_code_challenge_method = "S256";

diff --git a/nix/secrets/serverz/default.yaml b/nix/secrets/serverz/default.yaml
@@ -5,7 +5,7 @@ authelia-session-secret: ENC[AES256_GCM,data:qgCJ9d4PwiUYhUEeuzRL+hXb1mMt0W17LNP
 authelia-storage-encryption-key: ENC[AES256_GCM,data:ub+rSg3lNyxVJapVhMJBu+9kfG6ToSJSXmgie3qOvlkRZy4oLYdEIvgcie9yZ6CnSAASMLVBX8GSt2XKee8Lbg==,iv:vHNERwAxZ8ndFKANC40GUqt1JF1ivBOPWt70MWgSMso=,tag:yQN8dDoXl6Uqg3VSG3hhUw==,type:str]
 authelia-jwt-rsa-key: ENC[AES256_GCM,data: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,iv:1Mdm76uIxkYvK4NO0HlvO5azAx5npHCHrHs74i1qzCA=,tag:M2o2mTE0jAtQLmpzy4tsoQ==,type:str]
 nextcloud-admin-pass: ENC[AES256_GCM,data:yJFfJ7K/gyM71omo//qURGs=,iv:5JmRGdHHtJtiZeuF4kjok2nUrWQArRRTr5XbwJtDXxI=,tag:SY9Lz7QMCNoixUesA3Q9WQ==,type:str]
-nextcloud-oidc-login-client-secret: ENC[AES256_GCM,data:OZKlcKuymUoUDyql2vunjGED5Q5EdGdXsKOuj322qiXTodnAM3wh/l+rZYtQ24kINDf+6XTD1wiGdzjbbTwBTOEv6d2SVAcT,iv:HzBvCsrzSMmParyrbK+3oGkau1oeoJiNJEYsTEU1Ho4=,tag:cdMeeGbsfWmA1tEwoLWsDA==,type:str]
+nextcloud-oidc-login-client-secret: ENC[AES256_GCM,data:met/KPJzKkCyUWPcz41/KfarDjAVY3V0iYC0nyC6dNJmztJ/EfKGZxBYUYpEEsObFWcAsVScdnP8+xnwKqM46UZeQl9Dq1wYJ6dah3WTd2DRZ9JwSnc8rg5Ko844mFG/w9xaAy0R1X8G,iv:05ZKooR6GRQGhk3XTYv7Op2fFL0PmoNOoxesU3OZDYc=,tag:SGzngz8P61ORFSNqkeRJTA==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -30,8 +30,8 @@ sops:
             SVdkN2htWTBaLy9jdGJ6S0RocE9JMFUK8yejh6yKp+OLsNFXWHUJzvHnwaGI1yXA
             Y4F7JY6bhXcu8KJGvjgy08ox+n82V6xY9ov1hwhUlfyIZf4H0/bjuA==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-11-18T12:37:15Z"
-    mac: ENC[AES256_GCM,data:6RBpAqkREnsusxVULRiOgHGk+RiXT7GmyevnHyAQxMkvMd5AQu19vD58F1Y4Z6EEeWLwtfsAi93KVLYhtHrQxBBZ7hogIneMH3KLT6sxM4WycqPgcqum4JEqF2ZMMUuLw7oaWEMYJuDVAymnBS6ahu6LWBd7WxsLeOUTvHeMDpM=,iv:PjqfAwOlppOAnr64VEqSICOhx6qhZXKVDnYitJiw0mw=,tag:Ba9wfgwBsgtPOP48EYA/9A==,type:str]
+    lastmodified: "2024-11-18T13:12:24Z"
+    mac: ENC[AES256_GCM,data:TDelf/LKPatnK9rfSWLGU9nhn+sHq0JFcyjjfFk6rKty8cMBG8tIvhqxXA3+U8hDjKGWMwMCjJdrQFgh3qIJB6cQVLosY11qEWeI4WPr8lQ4OViTqfz49duCxAxuLr58yjQqOrI7RVdhlou9KMWg8UQh/r4dTJckUJ3Q48uo9YE=,iv:bAdnbs12SJ18iTqZB6MSrRRXDrVINwBSJpo/Q59JafQ=,tag:g8P+w+dnLpq9X6ASFn64jQ==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
     version: 3.9.1