Merge pull request #462 from PriceChild/patch-1

0.6.2-beta.5 config updates in Nix
This commit is contained in:
Aarnav Tale
2026-02-25 20:33:26 -05:00
committed by GitHub
+41 -10
View File
@@ -44,6 +44,13 @@ in {
description = "The port to listen on.";
};
base_url = mkOption {
type = types.str;
default = "http://localhost:3000";
description = "The base URL for Headplane, not including the dashboard prefix (/admin) portion";
example = "http://localhost:3000";
};
cookie_secret_path = mkOption {
type = types.nullOr types.path;
default = null;
@@ -93,6 +100,13 @@ in {
'';
example = "/var/lib/headplane";
};
info_secret = mkOption {
type = types.nullOr types.str;
default = null;
description = "Secret is optional and allows access to certain debug endpoints";
example = "config.sops.secrets.info_secret.path";
};
};
};
default = {};
@@ -267,6 +281,27 @@ in {
example = "https://provider.example.com/issuer-url";
};
authorization_endpoint = mkOption {
type = types.nullOr types.str;
default = null;
description = "Optionally override authorization_endpoint";
example = "https://provider.example.com/authorization_endpoint";
};
token_endpoint = mkOption {
type = types.nullOr types.str;
default = null;
description = "Optionally override token_endpoint";
example = "https://provider.example.com/token_endpoint";
};
userinfo_endpoint = mkOption {
type = types.nullOr types.str;
default = null;
description = "Optionally override userinfo_endpoint";
example = "https://provider.example.com/userinfo_endpoint";
};
client_id = mkOption {
type = types.str;
default = "";
@@ -308,16 +343,6 @@ in {
example = "config.sops.secrets.headscale_api_key.path";
};
redirect_uri = mkOption {
type = types.str;
default = "";
description = ''
This should point to your publicly accessible URL
for your Headplane instance with /admin/oidc/callback.
'';
example = "https://headscale.example.com/admin/oidc/callback";
};
user_storage_file = mkOption {
type = types.path;
default = "/var/lib/headplane/users.json";
@@ -326,6 +351,12 @@ in {
'';
example = "/var/lib/headplane/users.json";
};
use_pkce = mkOption {
type = types.bool;
default = false;
description = "Whether to use PKCE when authenticating users.";
};
};
};
default = {};