summary refs log tree commit diff
diff options
context:
space:
mode:
authorRobert <robert@coffeezombie.com>2025-10-22 15:52:04 -0700
committerGerrit Code Review <gerrit@internetsafetylabs.org>2025-10-22 15:52:04 -0700
commit5f64a5b957ee1045f211a1282b2dc732385d41f4 (patch)
treef1dcf73f1ad5e380271d3fc121d18064928ba0bf
parentcedd0fee03e9ea896a7420dc79dcd51701320551 (diff)
parent216e505a44c2ca86491052e8fc4ce56dc732b261 (diff)
Merge "comment out rootPW. Add openldap to the flake" into main
-rw-r--r--flake.nix1
-rw-r--r--services/accounts/openldap.nix4
2 files changed, 3 insertions, 2 deletions
diff --git a/flake.nix b/flake.nix
index 896a587..49639b5 100644
--- a/flake.nix
+++ b/flake.nix
@@ -23,6 +23,7 @@
         ./services/frontend/common.nix
         ./services/frontend/haproxy.nix
         ./services/frontend/web-server.nix
+        ./services/accounts/openldap.nix
         ./wrappers/haproxy.nix
       ];
     };
diff --git a/services/accounts/openldap.nix b/services/accounts/openldap.nix
index e164fb4..479aebc 100644
--- a/services/accounts/openldap.nix
+++ b/services/accounts/openldap.nix
@@ -128,8 +128,8 @@
             #
             # TODO: we might consider adding some sort of auto-expiration
             # feature to the secret manager?
-            olcRootPW = builtins.readFile
-                "/etc/nixos/secrets/openldap/root-password";
+            # olcRootPW = builtins.readFile
+            #     "/etc/nixos/secrets/openldap/root-password";
 
             # TODO: once we have better formatting for this code (see the TODO
             # about an abstraction layer for long lines), the thinking behind