Co-Authored-By: Skyler Grey sky@a.starrysky.fyi
packetmix/packages/default.nix
packetmix/packages/default.nix
This file has not been changed.
packetmix/packages/kavita/change-webroot.diff
packetmix/packages/kavita/change-webroot.diff
This file has not been changed.
packetmix/packages/kavita/change-webroot.diff.license
packetmix/packages/kavita/change-webroot.diff.license
This file has not been changed.
packetmix/packages/kavita/default.nix
packetmix/packages/kavita/default.nix
This file has not been changed.
packetmix/packages/kavita/nuget-deps.json
packetmix/packages/kavita/nuget-deps.json
This file has not been changed.
packetmix/packages/kavita/nuget-deps.json.license
packetmix/packages/kavita/nuget-deps.json.license
This file has not been changed.
packetmix/systems/teal/copyparty.nix
packetmix/systems/teal/copyparty.nix
This file has not been changed.
+11
-2
packetmix/systems/teal/kavita.nix
+11
-2
packetmix/systems/teal/kavita.nix
···
1
# SPDX-FileCopyrightText: 2025 FreshlyBakedCake
2
#
3
# SPDX-License-Identifier: MIT
4
-
{ project, ... }:
5
{
6
disabledModules = [ "services/web-apps/kavita.nix" ];
7
imports = [
···
17
OpenIdConnectSettings = {
18
Authority = "https://idm.freshly.space/oauth2/openid/kavita";
19
ClientId = "kavita";
20
-
Secret = builtins.readFile "/secrets/kavita/OIDC_secret";
21
Enabled = true;
22
CustomScopes = [
23
"groups"
···
26
];
27
};
28
};
29
};
30
31
services.nginx.enable = true;
···
1
# SPDX-FileCopyrightText: 2025 FreshlyBakedCake
2
#
3
# SPDX-License-Identifier: MIT
4
+
{ project, pkgs, config, lib, ... }:
5
{
6
disabledModules = [ "services/web-apps/kavita.nix" ];
7
imports = [
···
17
OpenIdConnectSettings = {
18
Authority = "https://idm.freshly.space/oauth2/openid/kavita";
19
ClientId = "kavita";
20
+
Secret = "@OIDC_SECRET@";
21
Enabled = true;
22
CustomScopes = [
23
"groups"
···
26
];
27
};
28
};
29
+
};
30
+
31
+
systemd.services.kavita = {
32
+
preStart = lib.mkAfter ''
33
+
${pkgs.replace-secret}/bin/replace-secret '@OIDC_SECRET@' \
34
+
''${CREDENTIALS_DIRECTORY}/oidc_secret \
35
+
'${config.services.kavita.dataDir}/config/appsettings.json'
36
+
'';
37
+
serviceConfig.LoadCredential = [ "OIDC_SECRET:/secrets/kavita/OIDC_SECRET" ];
38
};
39
40
services.nginx.enable = true;
History
7 rounds
3 comments
thecoded.prof
submitted
#6
expand 0 comments
pull request successfully merged
thecoded.prof
submitted
#5
expand 3 comments
oh goodness, that codeblock formatting looks real tangled on my screen...
will remove and re push tmrw sometime. Also yea, that's one heck of a code block
thecoded.prof
submitted
#4
expand 0 comments
thecoded.prof
submitted
#3
expand 0 comments
thecoded.prof
submitted
#2
expand 0 comments
thecoded.prof
submitted
#1
expand 0 comments
thecoded.prof
submitted
#0
I think this maybe wasn't doing anything in our testing, so we should drop it (from copyparty)
otherwise looks good