diff --git a/nix/modules/nixos/infrastructure/mailserver/openid-connect.nix b/nix/modules/nixos/infrastructure/mailserver/openid-connect.nix index 896633b..120886d 100644 --- a/nix/modules/nixos/infrastructure/mailserver/openid-connect.nix +++ b/nix/modules/nixos/infrastructure/mailserver/openid-connect.nix @@ -1,7 +1,7 @@ { config, lib, ... }: let cfg = config.khscodes.infrastructure.mailserver; - oauthConfigFile = "/run/dovecot2/dovecot-oauth2.conf.ext"; + oauthConfigFile = "/run/secret/dovecot/dovecot-oauth2.conf.ext"; in { config = lib.mkIf cfg.enable { @@ -10,9 +10,8 @@ in contents = '' {{- with secret "kanidm/data/apps/dovecot" -}} scope = email openid profile - username_attribute = preferred_username + username_attribute = username debug = yes - tokeninfo_url = https://dovecot:{{ .Data.data.basic_secret }}@login.kaareskovgaard.net/oauth2/openid/dovecot/userinfo?access_token= introspection_url = https://dovecot:{{ .Data.data.basic_secret }}@login.kaareskovgaard.net/oauth2/token/introspect introspection_mode = post {{- end -}}