Hello,
What you did with OpenTofu is really cool and could solve the old RFC on ensure* options.
Proponents against those options are saying we should use other systems instead of nix to manage creating resources on stateful systems, like Terraform or OpenTofu. I tried adding ensure* options to LLDAP myself but there was pushback against my implementation so I closed it. And here you just provided the solution!
Would you be interested in collaborating to upstream to nixpkgs?
I have another interest in this implementation. I want to introduce contracts in nixpkgs. The TL; DR: is end users should be able to choose the SSO provider they want - Keycloak, Authelia, etc. - and the various services - Nextcloud, Home Assistant, etc. - should be able to handle any SSO provider without code change.
I have in my https://github.com/ibizaman/selfhostblocks project implemented declarative SSO integration for some services, using Authelia. To make an SSO contract come true, I would need at least one more declarative SSO provider, like Keycloak now provided thanks to you! This is another reason for me to want to upstream to nixpkgs and also experiment with it in my repo.
Hello,
What you did with OpenTofu is really cool and could solve the old RFC on ensure* options.
Proponents against those options are saying we should use other systems instead of nix to manage creating resources on stateful systems, like Terraform or OpenTofu. I tried adding
ensure*options to LLDAP myself but there was pushback against my implementation so I closed it. And here you just provided the solution!Would you be interested in collaborating to upstream to nixpkgs?
I have another interest in this implementation. I want to introduce contracts in nixpkgs. The TL; DR: is end users should be able to choose the SSO provider they want - Keycloak, Authelia, etc. - and the various services - Nextcloud, Home Assistant, etc. - should be able to handle any SSO provider without code change.
I have in my https://github.com/ibizaman/selfhostblocks project implemented declarative SSO integration for some services, using Authelia. To make an SSO contract come true, I would need at least one more declarative SSO provider, like Keycloak now provided thanks to you! This is another reason for me to want to upstream to nixpkgs and also experiment with it in my repo.