nixos/openldap: fix path + base64 value types

2020-11-21 16:13:03 +00:00
parent b2ebffe186
commit ce1acd97a7
2 changed files with 17 additions and 27 deletions
@@ -21,6 +21,7 @@ in {
    name = "openldap";

    machine = { pkgs, ... }: {
+      environment.etc."openldap/root_password".text = "notapassword";
      services.openldap = {
        enable = true;
        defaultSchemas = null;
@@ -37,13 +38,19 @@ in {
              ];
            };
            "olcDatabase={1}mdb" = {
+              # This tests string, base64 and path values, as well as lists of string values
              attrs = {
                objectClass = [ "olcDatabaseConfig" "olcMdbConfig" ];
                olcDatabase = "{1}mdb";
                olcDbDirectory = "/var/db/openldap";
                olcSuffix = "dc=example";
-                olcRootDN = "cn=root,dc=example";
-                olcRootPW = "notapassword";
+                olcRootDN = {
+                  # cn=root,dc=example
+                  base64 = "Y249cm9vdCxkYz1leGFtcGxl";
+                };
+                olcRootPW = {
+                  path = "/etc/openldap/root_password";
+                };
              };
            };
          };