1 files changed, 19 insertions, 0 deletions
diff --git a/profiles/keycloak.nix b/profiles/keycloak.nix
new file mode 100644
index 0000000..7aac133
--- /dev/null
+++ b/profiles/keycloak.nix
@@ -0,0 +1,19 @@
+{ config, ... }:
+{
+  age.secrets.keycloak-db-password = {
+    file = ../secrets/keycloak-db-password.age;
+  };
+
+  networking.firewall.allowedTCPPorts = [ 8080 ];
+
+  services.keycloak = {
+    enable = true;
+    database.passwordFile = config.age.secrets.keycloak-db-password.path;
+    settings = {
+      hostname = "id.fcuny.net";
+      http-port = 8080;
+      proxy-headers = "xforwarded";
+      http-enabled = true;
+    };
+  };
+}