superconfig/configs/services/git/ at 4bbfd29e233913592296e6fa9296510082c3f65c · hermes.pds.lassul.us/superconfig · Tangled

hermes.pds.lassul.us / superconfig

forked from lass.pds.lassul.us/superconfig

0

This repository has no description

0

superconfig / configs / services / git

2 files

at 4bbfd29e233913592296e6fa9296510082c3f65c

Hermes configs.services.git: tranquil PDS on neoprism with id.lassul.us login 5d ago

configs.services.git: tranquil PDS on neoprism with id.lassul.us login pds.lassul.us with handles <name>.pds.lassul.us (wildcard cert via DNS-01). Login through the zitadel project pds (access = declarative, only lass@lassul.us), via Tranquil's generic OIDC SSO. Accounts are created only through the SSO signup, without invite codes; nginx returns 403 for createAccount, createPasskeyAccount and createDelegatedAccount (this also blocks migrating accounts in). SMTP username and SSO_OIDC_ENABLED are set via the environment because the nixpkgs module validates the config file at build time without the secrets they require. Mail goes out as send-only pds@lassul.us, a mailbox on neoprism's mailserver defined next to the PDS.

5 days ago

configs.services.git: tranquil PDS on neoprism with id.lassul.us login pds.lassul.us with handles <name>.pds.lassul.us (wildcard cert via DNS-01). Login through the zitadel project pds (access = declarative, only lass@lassul.us), via Tranquil's generic OIDC SSO. Accounts are created only through the SSO signup, without invite codes; nginx returns 403 for createAccount, createPasskeyAccount and createDelegatedAccount (this also blocks migrating accounts in). SMTP username and SSO_OIDC_ENABLED are set via the environment because the nixpkgs module validates the config file at build time without the secrets they require. Mail goes out as send-only pds@lassul.us, a mailbox on neoprism's mailserver defined next to the PDS.

5 days ago