diff options
author | talyz <kim.lindberger@gmail.com> | 2021-05-14 12:15:44 +0200 |
---|---|---|
committer | talyz <kim.lindberger@gmail.com> | 2021-05-21 13:09:32 +0200 |
commit | dbf91bc2f12e80dd1933261e049b801d1a626a4e (patch) | |
tree | 0780b055b2e50c1d7f91b1832075b0acec11996a /nixos/modules/services/web-apps/keycloak.xml | |
parent | 83e406e97ab0feb90bfd2925fcf3ed5b01236591 (diff) | |
download | nixpkgs-dbf91bc2f12e80dd1933261e049b801d1a626a4e.tar nixpkgs-dbf91bc2f12e80dd1933261e049b801d1a626a4e.tar.gz nixpkgs-dbf91bc2f12e80dd1933261e049b801d1a626a4e.tar.bz2 nixpkgs-dbf91bc2f12e80dd1933261e049b801d1a626a4e.tar.lz nixpkgs-dbf91bc2f12e80dd1933261e049b801d1a626a4e.tar.xz nixpkgs-dbf91bc2f12e80dd1933261e049b801d1a626a4e.tar.zst nixpkgs-dbf91bc2f12e80dd1933261e049b801d1a626a4e.zip |
nixos/keycloak: keycloak.database* -> keycloak.database.*
Move all database options to their own group / attribute. This makes the configuration clearer and brings it in line with most other modern modules.
Diffstat (limited to 'nixos/modules/services/web-apps/keycloak.xml')
-rw-r--r-- | nixos/modules/services/web-apps/keycloak.xml | 22 |
1 files changed, 11 insertions, 11 deletions
diff --git a/nixos/modules/services/web-apps/keycloak.xml b/nixos/modules/services/web-apps/keycloak.xml index ca5e223eee4..b622735ca10 100644 --- a/nixos/modules/services/web-apps/keycloak.xml +++ b/nixos/modules/services/web-apps/keycloak.xml @@ -41,31 +41,31 @@ <productname>PostgreSQL</productname> or <productname>MySQL</productname>. Which one is used can be configured in <xref - linkend="opt-services.keycloak.databaseType" />. The selected + linkend="opt-services.keycloak.database.type" />. The selected database will automatically be enabled and a database and role created unless <xref - linkend="opt-services.keycloak.databaseHost" /> is changed from + linkend="opt-services.keycloak.database.host" /> is changed from its default of <literal>localhost</literal> or <xref - linkend="opt-services.keycloak.databaseCreateLocally" /> is set + linkend="opt-services.keycloak.database.createLocally" /> is set to <literal>false</literal>. </para> <para> External database access can also be configured by setting - <xref linkend="opt-services.keycloak.databaseHost" />, <xref - linkend="opt-services.keycloak.databaseUsername" />, <xref - linkend="opt-services.keycloak.databaseUseSSL" /> and <xref - linkend="opt-services.keycloak.databaseCaCert" /> as + <xref linkend="opt-services.keycloak.database.host" />, <xref + linkend="opt-services.keycloak.database.username" />, <xref + linkend="opt-services.keycloak.database.useSSL" /> and <xref + linkend="opt-services.keycloak.database.caCert" /> as appropriate. Note that you need to manually create a database called <literal>keycloak</literal> and allow the configured database user full access to it. </para> <para> - <xref linkend="opt-services.keycloak.databasePasswordFile" /> + <xref linkend="opt-services.keycloak.database.passwordFile" /> must be set to the path to a file containing the password used - to log in to the database. If <xref linkend="opt-services.keycloak.databaseHost" /> - and <xref linkend="opt-services.keycloak.databaseCreateLocally" /> + to log in to the database. If <xref linkend="opt-services.keycloak.database.host" /> + and <xref linkend="opt-services.keycloak.database.createLocally" /> are kept at their defaults, the database role <literal>keycloak</literal> with that password is provisioned on the local database instance. @@ -196,7 +196,7 @@ services.keycloak = { <link linkend="opt-services.keycloak.frontendUrl">frontendUrl</link> = "https://keycloak.example.com/auth"; <link linkend="opt-services.keycloak.forceBackendUrlToFrontendUrl">forceBackendUrlToFrontendUrl</link> = true; <link linkend="opt-services.keycloak.certificatePrivateKeyBundle">certificatePrivateKeyBundle</link> = "/run/keys/ssl_cert"; - <link linkend="opt-services.keycloak.databasePasswordFile">databasePasswordFile</link> = "/run/keys/db_password"; + <link linkend="opt-services.keycloak.database.passwordFile">database.passwordFile</link> = "/run/keys/db_password"; }; </programlisting> </para> |