aboutsummaryrefslogtreecommitdiff
path: root/cluster/prod/app
diff options
context:
space:
mode:
authorQuentin Dufour <quentin@deuxfleurs.fr>2022-08-31 10:25:32 +0200
committerQuentin Dufour <quentin@deuxfleurs.fr>2022-08-31 10:25:58 +0200
commit1749a98e86b0ea33131bbc3511fb7ed6fb39375d (patch)
tree68eecf6676d3fe8ad537c27450513431a5a414fc /cluster/prod/app
parent6ec9aad801e1d87d0be9d795da1b3ba7883c32cd (diff)
downloadnixcfg-1749a98e86b0ea33131bbc3511fb7ed6fb39375d.tar.gz
nixcfg-1749a98e86b0ea33131bbc3511fb7ed6fb39375d.zip
Update LDAP configuration
Diffstat (limited to 'cluster/prod/app')
-rw-r--r--cluster/prod/app/garage/deploy/garage.hcl2
-rw-r--r--cluster/prod/app/matrix/config/synapse/homeserver.yaml2
2 files changed, 2 insertions, 2 deletions
diff --git a/cluster/prod/app/garage/deploy/garage.hcl b/cluster/prod/app/garage/deploy/garage.hcl
index 5a9c6b5..ccc7dd6 100644
--- a/cluster/prod/app/garage/deploy/garage.hcl
+++ b/cluster/prod/app/garage/deploy/garage.hcl
@@ -104,7 +104,7 @@ job "garage" {
tags = [
"garage-web",
"tricot * 1",
- "tricot-add-header Content-Security-Policy default-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' https://code.jquery.com/; frame-ancestors 'self'",
+ #"tricot-add-header Content-Security-Policy default-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' https://code.jquery.com/; frame-ancestors 'self'",
"tricot-add-header Strict-Transport-Security max-age=63072000; includeSubDomains; preload",
"tricot-add-header X-Frame-Options SAMEORIGIN",
"tricot-add-header X-XSS-Protection 1; mode=block",
diff --git a/cluster/prod/app/matrix/config/synapse/homeserver.yaml b/cluster/prod/app/matrix/config/synapse/homeserver.yaml
index 9424c6d..1d7f73e 100644
--- a/cluster/prod/app/matrix/config/synapse/homeserver.yaml
+++ b/cluster/prod/app/matrix/config/synapse/homeserver.yaml
@@ -428,7 +428,7 @@ password_providers:
- module: "ldap_auth_provider.LdapAuthProvider"
config:
enabled: true
- uri: "ldap://bottin2.service.2.cluster.deuxfleurs.fr:389"
+ uri: "ldap://bottin.service.prod.consul:389"
start_tls: false
bind_dn: '{{ key "secrets/chat/synapse/ldap_binddn" | trimSpace }}'
bind_password: '{{ key "secrets/chat/synapse/ldap_bindpw" | trimSpace }}'