diff options
| author | Alex Auvolat <alex@adnab.me> | 2022-08-24 15:42:47 +0200 |
|---|---|---|
| committer | Alex Auvolat <alex@adnab.me> | 2022-08-24 15:42:47 +0200 |
| commit | 2e8923b383eb06c53261eee8e5c442b857fb67e4 (patch) | |
| tree | 0ad148f75f7b54dfed2dbac8f43f6df9badc502a /app/directory/config/bottin/config.json.tpl | |
| parent | 9848f3090f77363a2fda0f9fa673ebcf1fb8228c (diff) | |
| download | nixcfg-2e8923b383eb06c53261eee8e5c442b857fb67e4.tar.gz nixcfg-2e8923b383eb06c53261eee8e5c442b857fb67e4.zip | |
Move app files into cluster subdirectories; add prod garage
Diffstat (limited to 'app/directory/config/bottin/config.json.tpl')
| -rw-r--r-- | app/directory/config/bottin/config.json.tpl | 26 |
1 files changed, 0 insertions, 26 deletions
diff --git a/app/directory/config/bottin/config.json.tpl b/app/directory/config/bottin/config.json.tpl deleted file mode 100644 index 844f7b7..0000000 --- a/app/directory/config/bottin/config.json.tpl +++ /dev/null @@ -1,26 +0,0 @@ -{ - "suffix": "{{ key "secrets/directory/ldap_base_dn" }}", - "bind": "0.0.0.0:389", - "log_level": "debug", - "acl": [ - "*,{{ key "secrets/directory/ldap_base_dn" }}::read:*:* !userpassword !user_secret !alternate_user_secrets !garage_s3_secret_key", - "*::read modify:SELF:*", - "ANONYMOUS::bind:*,ou=users,{{ key "secrets/directory/ldap_base_dn" }}:", - "ANONYMOUS::bind:cn=admin,{{ key "secrets/directory/ldap_base_dn" }}:", - "*,ou=services,ou=users,{{ key "secrets/directory/ldap_base_dn" }}::bind:*,ou=users,{{ key "secrets/directory/ldap_base_dn" }}:*", - "*,ou=services,ou=users,{{ key "secrets/directory/ldap_base_dn" }}::read:*:*", - - "*:cn=asso_deuxfleurs,ou=groups,{{ key "secrets/directory/ldap_base_dn" }}:add:*,ou=invitations,{{ key "secrets/directory/ldap_base_dn" }}:*", - "ANONYMOUS::bind:*,ou=invitations,{{ key "secrets/directory/ldap_base_dn" }}:", - "*,ou=invitations,{{ key "secrets/directory/ldap_base_dn" }}::delete:SELF:*", - - "*:cn=asso_deuxfleurs,ou=groups,{{ key "secrets/directory/ldap_base_dn" }}:add:*,ou=users,{{ key "secrets/directory/ldap_base_dn" }}:*", - "*,ou=invitations,{{ key "secrets/directory/ldap_base_dn" }}::add:*,ou=users,{{ key "secrets/directory/ldap_base_dn" }}:*", - - "*:cn=asso_deuxfleurs,ou=groups,{{ key "secrets/directory/ldap_base_dn" }}:modifyAdd:cn=email,ou=groups,{{ key "secrets/directory/ldap_base_dn" }}:*", - "*,ou=invitations,{{ key "secrets/directory/ldap_base_dn" }}::modifyAdd:cn=email,ou=groups,{{ key "secrets/directory/ldap_base_dn" }}:*", - - "cn=admin,{{ key "secrets/directory/ldap_base_dn" }}::read add modify delete:*:*", - "*:cn=admin,ou=groups,{{ key "secrets/directory/ldap_base_dn" }}:read add modify delete:*:*" - ] -} |