summary refs log tree commit diff
diff options
context:
space:
mode:
authorRobert Orr <robert@coffeezombie.com>2025-10-20 13:50:17 -0700
committerRobert Orr <robert@coffeezombie.com>2025-10-22 15:47:24 -0700
commit216e505a44c2ca86491052e8fc4ce56dc732b261 (patch)
treeaf8ab09f2c349504783f3ce627f306e255cb29a2
parent7987c3d069ea6c2adb3c06d4bada0cef1121948b (diff)
comment out rootPW.
Add openldap to the flake

Change-Id: I727e8fe9f0fa4cf4bd98f8b1571837b543bb3311
-rw-r--r--flake.nix1
-rw-r--r--services/accounts/openldap.nix4
2 files changed, 3 insertions, 2 deletions
diff --git a/flake.nix b/flake.nix
index 896a587..49639b5 100644
--- a/flake.nix
+++ b/flake.nix
@@ -23,6 +23,7 @@
         ./services/frontend/common.nix
         ./services/frontend/haproxy.nix
         ./services/frontend/web-server.nix
+        ./services/accounts/openldap.nix
         ./wrappers/haproxy.nix
       ];
     };
diff --git a/services/accounts/openldap.nix b/services/accounts/openldap.nix
index e164fb4..479aebc 100644
--- a/services/accounts/openldap.nix
+++ b/services/accounts/openldap.nix
@@ -128,8 +128,8 @@
             #
             # TODO: we might consider adding some sort of auto-expiration
             # feature to the secret manager?
-            olcRootPW = builtins.readFile
-                "/etc/nixos/secrets/openldap/root-password";
+            # olcRootPW = builtins.readFile
+            #     "/etc/nixos/secrets/openldap/root-password";
 
             # TODO: once we have better formatting for this code (see the TODO
             # about an abstraction layer for long lines), the thinking behind