From 2843d081a07847c6fdc79484e17604b2869a0ad3 Mon Sep 17 00:00:00 2001
From: mc-fucker <dev@mc-fucker.cool>
Date: Fri, 30 Jun 2023 09:30:44 +0200
Subject: [PATCH] changed zabbix-server to allow sso

---
 modules/zabbix-server.nix | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/modules/zabbix-server.nix b/modules/zabbix-server.nix
index 21e621f..bc0bdb7 100644
--- a/modules/zabbix-server.nix
+++ b/modules/zabbix-server.nix
@@ -48,10 +48,17 @@ in
       ZBX_SERVER_NAME = "Superbly Managed Networks and Hosting";
       TZ = "Europe/Berlin";
       PHP_TZ = "Europe/Berlin";
+      ZBX_SSO_IDP_CERT = "/usr/share/zabbix/conf/certs/idp.crt";
+      ZBX_SSO_SP_CERT = "/usr/share/zabbix/conf/certs/sp.crt";
+      ZBX_SSO_SP_KEY = "/usr/share/zabbix/conf/certs/sp.key";
+      ZBX_SSO_SETTINGS = ''{'baseurl': 'https://${domain}'}'';
     };
     environmentFiles = [ /etc/nixos/keys/zabbix-env ];
     extraOptions = cfg.podman.extraOptions ++ [ "--ip=${web_ip}" ];
     ports = [ "${port}:8080" ];
+    volumes = [
+      "/var/lib/zabbix/certs:/usr/share/zabbix/conf/certs:ro"
+    ];
   };
 
   services.nginx.virtualHosts.${domain} = {