sora/nixconfig
1
0
Fork 1
Code Issues 2 Pull Requests Actions Releases Activity

Jellyfin LDAP

Browse Source
This commit is contained in:
soraefir
2026-05-13 01:56:45 +02:00
parent f7af832d8e
commit 8c800ad0d3
2 changed files with 35 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
modules/server/containers/apps/jellyfin.nix
View File

@@ -12,6 +12,12 @@ let
ExposedPorts = { "8096/tcp" = { }; }; ExposedPorts = { "8096/tcp" = { }; };
}; };
}; };
#LDAP_DC_DOMAIN = "dc=ldap,dc=helcel,dc=net"
#HOST=...
#LDAP_BIND_USER=ldap-sa
#LDAP_BIND_PASSWORD=...
#LDAP_GROUP=flix
#LDAP_ADMIN=admin
in { in {
paths = [ paths = [
{ {

29
modules/server/containers/data/jellyfin/LDAP-Auth.xml Normal file
View File

@@ -0,0 +1,29 @@
<?xml version="1.0" encoding="utf-8"?>
<PluginConfiguration xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
<LdapUsers />
<LdapServer>@HOST@</LdapServer>
<LdapPort>389</LdapPort>
<UseSsl>false</UseSsl>
<UseStartTls>false</UseStartTls>
<SkipSslVerify>true</SkipSslVerify>
<LdapBindUser>cn=@LDAP_BIND_USER@,ou=users,@LDAP_DC_DOMAIN@</LdapBindUser>
<LdapBindPassword>@LDAP_BIND_PASSWORD@</LdapBindPassword>
<LdapBaseDn>@LDAP_DC_DOMAIN@</LdapBaseDn>
<LdapSearchFilter>(memberOf=cn=@LDAP_GROUP@,ou=groups,@LDAP_DC_DOMAIN@)</LdapSearchFilter>
<LdapAdminBaseDn />
<LdapAdminFilter>(memberOf=cn=@LDAP_ADMIN@,ou=groups,@LDAP_DC_DOMAIN@)</LdapAdminFilter>
<EnableLdapAdminFilterMemberUid>false</EnableLdapAdminFilterMemberUid>
<LdapSearchAttributes>uid, cn, mail, displayName</LdapSearchAttributes>
<LdapClientCertPath />
<LdapClientKeyPath />
<LdapRootCaPath />
<CreateUsersFromLdap>true</CreateUsersFromLdap>
<AllowPassChange>false</AllowPassChange>
<LdapUidAttribute>uid</LdapUidAttribute>
<LdapUsernameAttribute>cn</LdapUsernameAttribute>
<LdapPasswordAttribute>userPassword</LdapPasswordAttribute>
<EnableLdapProfileImageSync>false</EnableLdapProfileImageSync>
<LdapProfileImageAttribute>jpegphoto</LdapProfileImageAttribute>
<EnableAllFolders>true</EnableAllFolders>
<EnabledFolders />
<PasswordResetUrl />