From 26d2608a66a5997dc42976696186f88756d305ce Mon Sep 17 00:00:00 2001
From: Jack O'Sullivan <jackos1998@gmail.com>
Date: Sun, 12 Jun 2022 01:00:26 +0100
Subject: [PATCH] nixos/middleman: Add simple auth

---
 .../vms/shill/containers/middleman/default.nix  |   6 ++++++
 secrets/nginx-sso.yaml.age                      | Bin 645 -> 928 bytes
 2 files changed, 6 insertions(+)

diff --git a/nixos/boxes/colony/vms/shill/containers/middleman/default.nix b/nixos/boxes/colony/vms/shill/containers/middleman/default.nix
index f837b55..5456167 100644
--- a/nixos/boxes/colony/vms/shill/containers/middleman/default.nix
+++ b/nixos/boxes/colony/vms/shill/containers/middleman/default.nix
@@ -70,6 +70,7 @@
                   default_method = "google_oauth";
                   names = {
                     google_oauth = "Google account";
+                    simple = "Username / password";
                   };
                 };
                 cookie = {
@@ -87,6 +88,11 @@
                   ];
                 };
                 providers = {
+                  simple = {
+                    groups = {
+                      admin = [ "dev" ];
+                    };
+                  };
                   google_oauth = {
                     client_id = "545475967061-cag4g1qf0pk33g3pdbom4v69562vboc8.apps.googleusercontent.com";
                     redirect_url = "https://sso.${lib.my.pubDomain}/login";
diff --git a/secrets/nginx-sso.yaml.age b/secrets/nginx-sso.yaml.age
index 1af6255dbcbe7a10a45f980420aba284e4f8ceea..606dd6d86a3e43fe9d4db15b9284632ebd0674ca 100644
GIT binary patch
delta 897
zcmV-{1AhF41)v9zEPr?~PI+2zI5KBuaB)UaR#AC$XDfD5OfhLUNLF+)K~_~za&c{P
zNq2KGNeXpqd3i5wRd{T9SY}dKF*SHcHA`rAW_K%kX;))(Pi|snP)jyBRbyp$cM2^&
zAXqXrH8D9LLo#72MOrycM09dwQg<|Zb82*0a9A&4Og2VQaDP~JSaWV@RZ(O!OHgh_
z3RZM%X-7FuQg2dnVP|MbXfZTWH)c*@R7GZaICnF3K~7?HGB9sYWMMT$3N1b$YHe{f
zX)R}RWnpt=AR{4WAWkPxa|&uha9A~1WOs9PV?k#_LTxu;aY=P*IWa+0R%&B<LPd8u
zR#jG2Su<8pS${A#Q)^jFYE5`#X-soXRd{ttc{6hgMp8jjaWzX(YISB&R5C$!F=H`v
zLrYY7YcO<9FIR15R5xuxPgYkobYfFAQfn|mYj#UHGeTzyEiEk|WobxNPg7G=OKMqc
zc6UfvGD%o5GiOXla$#t9cQtfRHfnP*V`zFtIC4=6;(y_s+pw8(b98R3#3G(FE=X4B
zPH#L$8=K;fGunYxgY@j4vU8P@<B){I=4nv^cFNOq7aHyQoq;O`hbXdI#NI9bI)ZER
zaV$pqieq!IHe8fjF78DD>BNc@JF$3&WZP|Q-Fb0T{JXJSOhmG~?Za6Fe9LPzJbFhL
zkD?Y6UVpGa<EfoqM#4!)Vk}T*F7JENyAN3i?N>nMuw*BqE;@NfVOWLzS(bVuv3w+4
z>0{zR;dVg|{#zM<^IYA778|}|KCJQ-F=R+#O#1jrTT$##wALnY_IgKrGhQgUm1OoR
zhi~BL_^fZw3fPZ*0vbzX=38=7_XCVLiuu*8eScN_-8F67ZlxmOK@SkohdN&;u$aKl
z7Wzn^)MqY#|7iAT>Se!4SjMA^@tZ(kWtHl^rAHewKT57vu`Ce;c2By^L9;kMJYu*z
zqR`?^#Wq$QaZTNMkH8_Ja}XLBSkR|JXVdpDlf5$qXaP+BsA&DA>eI!f#<gLt8h2%@
zEP5oHdK<7amCQG#aP?nY`;js^#kd#4ebG;YO2&wR;a?){vCi=VCMuQb^LA-irQH5O
z_)#qBoF+_Y<Nm*ToS=JqSbmqU9sb^5%B|nU0Cjay^tm=F#iE%mC&D+qt0KUOFYI9{
X@;G`Y`Y3NC!QN)Ii*v3LOz3phQfz=t

delta 612
zcmV-q0-ODy2ZaTYEPpF>ZDm(7RCIVUb23F?X>Vq4Yj`(fT4!Z-I9FwCYkE>LYgIH-
zPh&$zV+t}*Z$vglN-;)LH&8KHK{t9uQ8!R|bWl%EO*Uq1bSp|_aYZy{Z7)SqK?*HC
zAXqXrH8D9LQDJgvM@wZ@F-10VFKcmlQE_u-IcP*TLQ-gBIe&0OMt3VXZdzhzOJ+rL
z3VAh6PcL<CRbfU$V>ViCb#-k;OL$UHS!gjgaz#01b#pmRNi#@FWjJeN3N1b$KTs`a
za%Ew2WgsJEL0cv)aUd`=J4Fg&bxUthcWXCnHfb<5bV5&3b#iBRLpEz`M@w39QbIFT
zcQj5+G&4|BPk%E_IYDn#MP_$FHeqaZS5Q}ZLQ+&m3OQ#<3N0-yAXaZmLu^<yaco*P
zFLhOQYGPPKMmSYCL1I#Ab9PulQbkNwRe4%XYEV*13d;r%H0$sDVRFI@HV#D`k@(k&
z>Wi<kHtiAbao`13Zn*?bx5i^9RrCm<uflI~xGspdnSY+)1uP)wS%Rz*RYs%K@*ta&
zemo%}SS)BCKGJ^)Hbs&>xS=J<9M2glq$UkRY55>bC9^8hDF6-l?S!3N&dVTIJ7~Zk
z1#WzKSw`=u&7YZYWorE@K;YB+G6x@g{N<dQ=p*GV0ICg^u46^zc48r(5ns>@mo!t=
zga0iPLtV`3GvU*%N?C-Qc`fcLD1`cG)xQe)ZP0~PSxHy4^yDK*Hy#%3(LjjEA-VyY
ybcQCbPaL<!m0Lc2Y~R6H=mLU`&q(IgkEQkt)d33d_i)$i27H<rlc+8MsJ5bFR_<^B