voyager: remove kanidm

hosts/defiant/services/hedgedoc.nix

@@ -55,7 +55,6 @@ in {
   systemd.services.hedgedoc = {
     requires = [
       "postgresql.service"
-      # "kanidm.service"
     ];
     serviceConfig = let
       workDir = "/var/lib/hedgedoc";

hosts/defiant/services/nginx.nix

@@ -54,14 +54,6 @@ in {
       '';
     } // overrides;
   in {
-    "auth.feal.no" = publicProxy "" {
-      locations."/" = {
-        proxyPass = "https://voyager.home.feal.no:8300";
-        extraConfig = ''
-          proxy_ssl_verify off;
-        '';
-      };
-    };
     "cloud.feal.no" = publicProxy "" {
       locations."/" = {
         proxyPass = "http://voyager.home.feal.no";

hosts/voyager/backup.nix

@@ -38,7 +38,7 @@
         };
       };
 
-      # TODO: kanidm, timemachine, calibre(?), nextcloud
+      # TODO: timemachine, nextcloud, komga, calibre
 
     };
 

hosts/voyager/configuration.nix

@@ -13,7 +13,6 @@
       ./services/calibre.nix
       ./services/fancontrol.nix
       ./services/jellyfin.nix
-      ./services/kanidm.nix
       ./services/komga.nix
       ./services/nextcloud.nix
       ./services/nginx

hosts/voyager/services/kanidm.nix

@@ -1,36 +0,0 @@
-{ config, pkgs, lib, ... }:
-let
-  cfg = config.services.kanidm;
-  certPath = "/etc/ssl-snakeoil/auth_feal_no";
-  ldapbindaddress = "0.0.0.0:636";
-in {
-  # Kanidm - Identity management / auth provider
-  services.kanidm = {
-    enableServer = true;
-    serverSettings = {
-      origin = "https://${cfg.serverSettings.domain}";
-      domain = "auth.feal.no";
-      bindaddress = "0.0.0.0:8300";
-      inherit ldapbindaddress;
-
-      tls_chain = "/run/credentials/kanidm.service/cert.crt";
-      tls_key   = "/run/credentials/kanidm.service/cert.key";
-    };
-  };
-
-  systemd.services.kanidm = {
-    serviceConfig.LoadCredential = [
-      "cert.crt:${certPath}.crt"
-      "cert.key:${certPath}.key"
-    ];
-  };
-
-  environment = {
-    systemPackages = [ pkgs.kanidm ];
-    etc."kanidm/config".text = ''
-      uri="${cfg.serverSettings.origin}"
-    '';
-  };
-
-  networking.firewall.allowedTCPPorts = [ 8300 ];
- }