Authentication

GLAuth

Repo configuration

Add/Update .vscode/extensions.json

{
    "files.associations": {
        "**/cluster/**/*.sops.toml": "plaintext"
    }
}

Add/Update .gitattributes
```
*.sops.toml linguist-language=JSON
```

Add/Update .sops.yaml

- path_regex: cluster/.*\.sops\.toml
    key_groups:
    - age:
        - age1hhurqwmfvl9m3vh3hk8urulfzcdsrep2ax2neazqt435yhpamu3qj20asg

App Configuration

Below are the decrypted versions of the sops encrypted toml files.

passbcrypt can be generated on CyberChef

server.sops.toml

debug = true
[ldap]
    enabled = true
    listen = "0.0.0.0:389"
[ldaps]
    enabled = false
[api]
    enabled = true
    tls = false
    listen = "0.0.0.0:5555"
[backend]
    datastore = "config"
    baseDN = "dc=home,dc=arpa"

groups.sops.toml

[[groups]]
    name = "svcaccts"
    gidnumber = 6500
[[groups]]
    name = "admins"
    gidnumber = 6501
[[groups]]
    name = "people"
    gidnumber = 6502

users.sops.toml

[[users]]
    name = "search"
    uidnumber = 5000
    primarygroup = 6500
    passbcrypt = ""
    [[users.capabilities]]
        action = "search"
        object = "*"
[[users]]
    name = "<name>"
    mail = ""
    givenname = "<Name>"
    sn = "<sn>"
    uidnumber = <uid>
    primarygroup = <gid>
    othergroups = [ <gid> ]
    passbcrypt = ""