From d553e9aee4ae3c559d1fcb6396aee64e67e428d9 Mon Sep 17 00:00:00 2001 From: Anish Pallati Date: Thu, 15 Jan 2026 11:21:56 -0500 Subject: [PATCH 01/11] keycloak.plugins: use tag instead of rev --- .../ke/keycloak/keycloak-restrict-client-auth/default.nix | 2 +- pkgs/by-name/ke/keycloak/scim-for-keycloak/default.nix | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/ke/keycloak/keycloak-restrict-client-auth/default.nix b/pkgs/by-name/ke/keycloak/keycloak-restrict-client-auth/default.nix index 2e02a2c1b1e9..433929ed3801 100644 --- a/pkgs/by-name/ke/keycloak/keycloak-restrict-client-auth/default.nix +++ b/pkgs/by-name/ke/keycloak/keycloak-restrict-client-auth/default.nix @@ -11,7 +11,7 @@ maven.buildMavenPackage rec { src = fetchFromGitHub { owner = "sventorben"; repo = "keycloak-restrict-client-auth"; - rev = "v${version}"; + tag = "v${version}"; hash = "sha256-nQ2AwXhSUu5RY/BbxXE2OXgEb7Zf6FfrGP5tfbgAXk8="; }; diff --git a/pkgs/by-name/ke/keycloak/scim-for-keycloak/default.nix b/pkgs/by-name/ke/keycloak/scim-for-keycloak/default.nix index 2d873fa51f41..0e383a47f89f 100644 --- a/pkgs/by-name/ke/keycloak/scim-for-keycloak/default.nix +++ b/pkgs/by-name/ke/keycloak/scim-for-keycloak/default.nix @@ -11,7 +11,7 @@ maven.buildMavenPackage rec { src = fetchFromGitHub { owner = "Captain-P-Goldfish"; repo = "scim-for-keycloak"; - rev = version; + tag = version; hash = "sha256-kHjCVkcD8C0tIaMExDlyQmcWMhypisR1nyG93laB8WU="; }; From 96c7b48bfe67328001e9c132d718b9837d095b58 Mon Sep 17 00:00:00 2001 From: Anish Pallati Date: Thu, 15 Jan 2026 11:23:12 -0500 Subject: [PATCH 02/11] keycloak.plugins.keycloak-2fa-sms-authenticator: init at 26.4.10 --- pkgs/by-name/ke/keycloak/all-plugins.nix | 1 + .../default.nix | 43 +++++++++++++++++++ 2 files changed, 44 insertions(+) create mode 100644 pkgs/by-name/ke/keycloak/keycloak-2fa-sms-authenticator/default.nix diff --git a/pkgs/by-name/ke/keycloak/all-plugins.nix b/pkgs/by-name/ke/keycloak/all-plugins.nix index f000a43a06e7..46198326c172 100644 --- a/pkgs/by-name/ke/keycloak/all-plugins.nix +++ b/pkgs/by-name/ke/keycloak/all-plugins.nix @@ -13,6 +13,7 @@ keycloak-metrics-spi = callPackage ./keycloak-metrics-spi { }; keycloak-restrict-client-auth = callPackage ./keycloak-restrict-client-auth { }; keycloak-remember-me-authenticator = callPackage ./keycloak-remember-me-authenticator { }; + keycloak-2fa-sms-authenticator = callPackage ./keycloak-2fa-sms-authenticator { }; # junixsocket provides Unix domain socket support for JDBC connections, # which is required for connecting to PostgreSQL via Unix socket. diff --git a/pkgs/by-name/ke/keycloak/keycloak-2fa-sms-authenticator/default.nix b/pkgs/by-name/ke/keycloak/keycloak-2fa-sms-authenticator/default.nix new file mode 100644 index 000000000000..d910858f0ecb --- /dev/null +++ b/pkgs/by-name/ke/keycloak/keycloak-2fa-sms-authenticator/default.nix @@ -0,0 +1,43 @@ +{ + stdenv, + maven, + lib, + fetchFromGitHub, +}: +maven.buildMavenPackage rec { + pname = "keycloak-2fa-sms-authenticator"; + version = "26.4.10"; + + src = fetchFromGitHub { + owner = "netzbegruenung"; + repo = "keycloak-mfa-plugins"; + tag = "v${version}"; + hash = "sha256-J7t/SRfK/LTcW7Y+D6bkHcXK+lKqUYLEqSpNWJUC3kQ="; + }; + + mvnHash = + let + mvnHashes = { + "aarch64-darwin" = "sha256-eRlu24SYe+PBOTKoAQPd5MoM7VUxHZx4/uiW6mV2PZI="; + "x86_64-darwin" = "sha256-p+XpCjXiEPMJnXIrbD2Qse/csZfv8YZ6h+sNZitCyro="; + "aarch64-linux" = "sha256-4P9qM3X99dEy3ssr1+vp65QUJikRfE4EoK6LOta9IFs="; + "x86_64-linux" = "sha256-wxgEHC1xJahyoizozvRfRZAWTjrYmYNM42yk+ZRke5A="; + }; + in + mvnHashes.${stdenv.hostPlatform.system} + or (throw "Unsupported system: ${stdenv.hostPlatform.system}"); + + installPhase = '' + runHook preInstall + install -Dm644 sms-authenticator/target/netzbegruenung.sms-authenticator-v${version}.jar \ + $out/share/java/keycloak/keycloak-2fa-sms-authenticator.jar + runHook postInstall + ''; + + meta = { + homepage = "https://github.com/netzbegruenung/keycloak-mfa-plugins"; + description = "Keycloak authentication provider for 2FA via SMS"; + license = lib.licenses.asl20; + maintainers = with lib.maintainers; [ anish ]; + }; +} From 533f87b1f163f4471d3a3380cd348ac6f53db18b Mon Sep 17 00:00:00 2001 From: Anish Pallati Date: Thu, 15 Jan 2026 11:47:02 -0500 Subject: [PATCH 03/11] keycloak.plugins.keycloak-enforce-mfa-authenticator: init at 26.4.10 --- pkgs/by-name/ke/keycloak/all-plugins.nix | 1 + .../default.nix | 43 +++++++++++++++++++ 2 files changed, 44 insertions(+) create mode 100644 pkgs/by-name/ke/keycloak/keycloak-enforce-mfa-authenticator/default.nix diff --git a/pkgs/by-name/ke/keycloak/all-plugins.nix b/pkgs/by-name/ke/keycloak/all-plugins.nix index 46198326c172..b43bb1f92ec8 100644 --- a/pkgs/by-name/ke/keycloak/all-plugins.nix +++ b/pkgs/by-name/ke/keycloak/all-plugins.nix @@ -14,6 +14,7 @@ keycloak-restrict-client-auth = callPackage ./keycloak-restrict-client-auth { }; keycloak-remember-me-authenticator = callPackage ./keycloak-remember-me-authenticator { }; keycloak-2fa-sms-authenticator = callPackage ./keycloak-2fa-sms-authenticator { }; + keycloak-enforce-mfa-authenticator = callPackage ./keycloak-enforce-mfa-authenticator { }; # junixsocket provides Unix domain socket support for JDBC connections, # which is required for connecting to PostgreSQL via Unix socket. diff --git a/pkgs/by-name/ke/keycloak/keycloak-enforce-mfa-authenticator/default.nix b/pkgs/by-name/ke/keycloak/keycloak-enforce-mfa-authenticator/default.nix new file mode 100644 index 000000000000..2e8ecc4c0287 --- /dev/null +++ b/pkgs/by-name/ke/keycloak/keycloak-enforce-mfa-authenticator/default.nix @@ -0,0 +1,43 @@ +{ + stdenv, + maven, + lib, + fetchFromGitHub, +}: +maven.buildMavenPackage rec { + pname = "keycloak-enforce-mfa-authenticator"; + version = "26.4.10"; + + src = fetchFromGitHub { + owner = "netzbegruenung"; + repo = "keycloak-mfa-plugins"; + tag = "v${version}"; + hash = "sha256-J7t/SRfK/LTcW7Y+D6bkHcXK+lKqUYLEqSpNWJUC3kQ="; + }; + + mvnHash = + let + mvnHashes = { + "aarch64-darwin" = "sha256-eRlu24SYe+PBOTKoAQPd5MoM7VUxHZx4/uiW6mV2PZI="; + "x86_64-darwin" = "sha256-p+XpCjXiEPMJnXIrbD2Qse/csZfv8YZ6h+sNZitCyro="; + "aarch64-linux" = "sha256-4P9qM3X99dEy3ssr1+vp65QUJikRfE4EoK6LOta9IFs="; + "x86_64-linux" = "sha256-wxgEHC1xJahyoizozvRfRZAWTjrYmYNM42yk+ZRke5A="; + }; + in + mvnHashes.${stdenv.hostPlatform.system} + or (throw "Unsupported system: ${stdenv.hostPlatform.system}"); + + installPhase = '' + runHook preInstall + install -Dm644 enforce-mfa/target/netzbegruenung.enforce-mfa-v${version}.jar \ + $out/share/java/keycloak/keycloak-enforce-mfa-authenticator.jar + runHook postInstall + ''; + + meta = { + homepage = "https://github.com/netzbegruenung/keycloak-mfa-plugins"; + description = "Keycloak authenticator that enforces MFA"; + license = lib.licenses.asl20; + maintainers = with lib.maintainers; [ anish ]; + }; +} From 6603049592855d5eb031531ded1c1255d1a3d81c Mon Sep 17 00:00:00 2001 From: Anish Pallati Date: Thu, 15 Jan 2026 11:56:06 -0500 Subject: [PATCH 04/11] keycloak.plugins.keycloak-orgs: init at 0.126 --- pkgs/by-name/ke/keycloak/all-plugins.nix | 1 + .../ke/keycloak/keycloak-orgs/default.nix | 34 +++++++++++++++++++ 2 files changed, 35 insertions(+) create mode 100644 pkgs/by-name/ke/keycloak/keycloak-orgs/default.nix diff --git a/pkgs/by-name/ke/keycloak/all-plugins.nix b/pkgs/by-name/ke/keycloak/all-plugins.nix index b43bb1f92ec8..abeee8502f2f 100644 --- a/pkgs/by-name/ke/keycloak/all-plugins.nix +++ b/pkgs/by-name/ke/keycloak/all-plugins.nix @@ -15,6 +15,7 @@ keycloak-remember-me-authenticator = callPackage ./keycloak-remember-me-authenticator { }; keycloak-2fa-sms-authenticator = callPackage ./keycloak-2fa-sms-authenticator { }; keycloak-enforce-mfa-authenticator = callPackage ./keycloak-enforce-mfa-authenticator { }; + keycloak-orgs = callPackage ./keycloak-orgs { }; # junixsocket provides Unix domain socket support for JDBC connections, # which is required for connecting to PostgreSQL via Unix socket. diff --git a/pkgs/by-name/ke/keycloak/keycloak-orgs/default.nix b/pkgs/by-name/ke/keycloak/keycloak-orgs/default.nix new file mode 100644 index 000000000000..43dfe7918cb6 --- /dev/null +++ b/pkgs/by-name/ke/keycloak/keycloak-orgs/default.nix @@ -0,0 +1,34 @@ +{ + maven, + lib, + fetchFromGitHub, +}: +maven.buildMavenPackage rec { + pname = "keycloak-orgs"; + version = "0.126"; + + src = fetchFromGitHub { + owner = "p2-inc"; + repo = "keycloak-orgs"; + tag = "v${version}"; + hash = "sha256-AQvIkmm8YJoNMcN+85OEbBud7YDLAlk5NfC05js1k2Y="; + }; + + mvnHash = "sha256-lq3N0XBRyR9I6U0gvjsjJ9r6fZINSsTWAMvdDEIsT0g="; + + # Tell buildnumber-maven-plugin to use a fallback value because git/.git aren't present + mvnParameters = "-Dmaven.buildNumber.revisionOnScmFailure=v${version} -DskipTests"; + + installPhase = '' + runHook preInstall + install -Dm644 target/keycloak-orgs-${version}.jar $out/share/java/keycloak/keycloak-orgs.jar + runHook postInstall + ''; + + meta = { + homepage = "https://github.com/p2-inc/keycloak-orgs"; + description = "Multi-tenancy on a single Keycloak realm via first-class organization objects"; + license = lib.licenses.elastic20; + maintainers = with lib.maintainers; [ anish ]; + }; +} From 82a74da73b45c13d6e35bb40482e0527c5a267ae Mon Sep 17 00:00:00 2001 From: Anish Pallati Date: Thu, 15 Jan 2026 13:17:38 -0500 Subject: [PATCH 05/11] keycloak.plugins: match order to directory structure --- pkgs/by-name/ke/keycloak/all-plugins.nix | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/pkgs/by-name/ke/keycloak/all-plugins.nix b/pkgs/by-name/ke/keycloak/all-plugins.nix index abeee8502f2f..acce6add7b7a 100644 --- a/pkgs/by-name/ke/keycloak/all-plugins.nix +++ b/pkgs/by-name/ke/keycloak/all-plugins.nix @@ -6,16 +6,16 @@ }: { - scim-for-keycloak = callPackage ./scim-for-keycloak { }; - scim-keycloak-user-storage-spi = callPackage ./scim-keycloak-user-storage-spi { }; + keycloak-2fa-sms-authenticator = callPackage ./keycloak-2fa-sms-authenticator { }; keycloak-discord = callPackage ./keycloak-discord { }; + keycloak-enforce-mfa-authenticator = callPackage ./keycloak-enforce-mfa-authenticator { }; keycloak-magic-link = callPackage ./keycloak-magic-link { }; keycloak-metrics-spi = callPackage ./keycloak-metrics-spi { }; - keycloak-restrict-client-auth = callPackage ./keycloak-restrict-client-auth { }; - keycloak-remember-me-authenticator = callPackage ./keycloak-remember-me-authenticator { }; - keycloak-2fa-sms-authenticator = callPackage ./keycloak-2fa-sms-authenticator { }; - keycloak-enforce-mfa-authenticator = callPackage ./keycloak-enforce-mfa-authenticator { }; keycloak-orgs = callPackage ./keycloak-orgs { }; + keycloak-remember-me-authenticator = callPackage ./keycloak-remember-me-authenticator { }; + keycloak-restrict-client-auth = callPackage ./keycloak-restrict-client-auth { }; + scim-for-keycloak = callPackage ./scim-for-keycloak { }; + scim-keycloak-user-storage-spi = callPackage ./scim-keycloak-user-storage-spi { }; # junixsocket provides Unix domain socket support for JDBC connections, # which is required for connecting to PostgreSQL via Unix socket. From ffdb21dbcd86031537abf2bc759027d55d0741b8 Mon Sep 17 00:00:00 2001 From: Krit Dass Date: Mon, 19 Jan 2026 00:08:11 -0500 Subject: [PATCH 06/11] maintainers: add krit --- maintainers/maintainer-list.nix | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/maintainers/maintainer-list.nix b/maintainers/maintainer-list.nix index cf8cb77ebca7..8b83a9900d1b 100644 --- a/maintainers/maintainer-list.nix +++ b/maintainers/maintainer-list.nix @@ -14219,6 +14219,12 @@ githubId = 160317; name = "Kristoffer Søholm"; }; + krit = { + email = "dasskrit@gmail.com"; + github = "kritdass"; + githubId = 68750861; + name = "Krit Dass"; + }; kritnich = { email = "kritnich@kritni.ch"; github = "Kritnich"; From fff8d1accd520bb509a434807fd1b23fe95759a0 Mon Sep 17 00:00:00 2001 From: Krit Dass Date: Mon, 19 Jan 2026 00:52:05 -0500 Subject: [PATCH 07/11] keycloak.plugins.keycloak-secrets-vault-provider: init at 1.0.0 --- .../default.nix | 33 +++++++++++++++++++ 1 file changed, 33 insertions(+) create mode 100644 pkgs/by-name/ke/keycloak/keycloak-secrets-vault-provider/default.nix diff --git a/pkgs/by-name/ke/keycloak/keycloak-secrets-vault-provider/default.nix b/pkgs/by-name/ke/keycloak/keycloak-secrets-vault-provider/default.nix new file mode 100644 index 000000000000..dec3efe0ac68 --- /dev/null +++ b/pkgs/by-name/ke/keycloak/keycloak-secrets-vault-provider/default.nix @@ -0,0 +1,33 @@ +{ + maven, + lib, + fetchFromGitHub, +}: +maven.buildMavenPackage rec { + pname = "keycloak-secrets-vault-provider"; + version = "1.0.0"; + + src = fetchFromGitHub { + owner = "Nordix"; + repo = "keycloak-secrets-vault-provider"; + tag = "v${version}"; + hash = "sha256-7ttjTm3D+dDiw+00pK4yvDFNCuXFmapPKnOY7vfa2Ac="; + }; + + mvnHash = "sha256-AJwt6JnNAffXzazWI2fIUMp5j/Fm5LRhO31bOUOl7g0="; + + mvnParameters = "-Dmaven.test.skip"; + + installPhase = '' + runHook preInstall + install -Dm644 target/secrets-provider-${version}.jar $out/share/java/keycloak/keycloak-secrets-vault-provider.jar + runHook postInstall + ''; + + meta = { + homepage = "https://github.com/Nordix/keycloak-secrets-vault-provider"; + description = "Keycloak Vault SPI provider for OpenBao and HashiCorp Vault"; + license = lib.licenses.asl20; + maintainers = with lib.maintainers; [ krit ]; + }; +} From 83884610bf02c0daabfda359de8ec00079e2453a Mon Sep 17 00:00:00 2001 From: Jeffery Oo Date: Mon, 19 Jan 2026 02:30:39 -0500 Subject: [PATCH 08/11] maintainers: add jefferyoo --- maintainers/maintainer-list.nix | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/maintainers/maintainer-list.nix b/maintainers/maintainer-list.nix index 8b83a9900d1b..1e447bf935c1 100644 --- a/maintainers/maintainer-list.nix +++ b/maintainers/maintainer-list.nix @@ -12077,6 +12077,13 @@ githubId = 9425955; name = "Jean-François Labonté"; }; + jefferyoo = { + email = "oojefferywm@proton.me"; + github = "jefferyoo"; + githubId = 237098253; + name = "Jeffery Oo"; + keys = [ { fingerprint = "7129 408E 3D97 47EB FCE1 A6D5 1999 2BEC E706 CC59"; } ]; + }; jemand771 = { email = "willy@jemand771.net"; github = "jemand771"; From 748379eb11d74561c575af000e28b02588ebf9d5 Mon Sep 17 00:00:00 2001 From: Jeffery Oo Date: Mon, 19 Jan 2026 03:41:18 -0500 Subject: [PATCH 09/11] keycloak.plugins.keycloak-config-cli: init at 6.4.0 --- pkgs/by-name/ke/keycloak/all-plugins.nix | 2 +- .../keycloak/keycloak-config-cli/default.nix | 37 +++++++++++++++++++ pkgs/by-name/ke/keycloak/package.nix | 2 + 3 files changed, 40 insertions(+), 1 deletion(-) create mode 100644 pkgs/by-name/ke/keycloak/keycloak-config-cli/default.nix diff --git a/pkgs/by-name/ke/keycloak/all-plugins.nix b/pkgs/by-name/ke/keycloak/all-plugins.nix index acce6add7b7a..96e6e248fd96 100644 --- a/pkgs/by-name/ke/keycloak/all-plugins.nix +++ b/pkgs/by-name/ke/keycloak/all-plugins.nix @@ -4,9 +4,9 @@ junixsocket-common, junixsocket-native-common, }: - { keycloak-2fa-sms-authenticator = callPackage ./keycloak-2fa-sms-authenticator { }; + keycloak-config-cli = callPackage ./keycloak-config-cli { }; keycloak-discord = callPackage ./keycloak-discord { }; keycloak-enforce-mfa-authenticator = callPackage ./keycloak-enforce-mfa-authenticator { }; keycloak-magic-link = callPackage ./keycloak-magic-link { }; diff --git a/pkgs/by-name/ke/keycloak/keycloak-config-cli/default.nix b/pkgs/by-name/ke/keycloak/keycloak-config-cli/default.nix new file mode 100644 index 000000000000..61f6c1806a0f --- /dev/null +++ b/pkgs/by-name/ke/keycloak/keycloak-config-cli/default.nix @@ -0,0 +1,37 @@ +{ + maven, + lib, + fetchFromGitHub, +}: +maven.buildMavenPackage rec { + pname = "keycloak-config-cli"; + version = "6.4.0"; + + src = fetchFromGitHub { + owner = "adorsys"; + repo = "keycloak-config-cli"; + tag = "v${version}"; + hash = "sha256-Vg56Dz9U0eAJw+7u90MSZWmMIZttWYGXAwsXZsEfTj8="; + }; + + mvnHash = "sha256-tdh8hRqGXI3zuwy55dC3La9dm2naqeCEZT4qcw37iDI="; + + # Tests use MockServer which needs to bind to a local port + __darwinAllowLocalNetworking = true; + + installPhase = '' + runHook preInstall + install -Dm444 target/keycloak-config-cli.jar "$out/keycloak-config-cli.jar" + runHook postInstall + ''; + + meta = { + homepage = "https://github.com/adorsys/keycloak-config-cli/"; + description = "Import YAML/JSON-formatted configuration files into Keycloak"; + license = lib.licenses.asl20; + maintainers = with lib.maintainers; [ + jefferyoo + anish + ]; + }; +} diff --git a/pkgs/by-name/ke/keycloak/package.nix b/pkgs/by-name/ke/keycloak/package.nix index e811af61db2e..54e560f61a65 100644 --- a/pkgs/by-name/ke/keycloak/package.nix +++ b/pkgs/by-name/ke/keycloak/package.nix @@ -102,6 +102,8 @@ stdenv.mkDerivation (finalAttrs: { nickcao leona anish + krit + jefferyoo ]; }; }) From b624ba2d84bf7bee8e9a127d450f7a408274ff36 Mon Sep 17 00:00:00 2001 From: Anish Pallati Date: Mon, 19 Jan 2026 05:28:44 -0500 Subject: [PATCH 10/11] keycloak.plugins.keycloak-secrets-vault-provider: add to all-plugins --- maintainers/maintainer-list.nix | 12 ++++++------ pkgs/by-name/ke/keycloak/all-plugins.nix | 1 + .../keycloak-secrets-vault-provider/default.nix | 7 ++++--- 3 files changed, 11 insertions(+), 9 deletions(-) diff --git a/maintainers/maintainer-list.nix b/maintainers/maintainer-list.nix index 1e447bf935c1..366c29b5aba4 100644 --- a/maintainers/maintainer-list.nix +++ b/maintainers/maintainer-list.nix @@ -12071,12 +12071,6 @@ githubId = 1198065; name = "Jeffrey David Johnson"; }; - jefflabonte = { - email = "jean-francois.labonte@brightonlabs.ai"; - github = "JeffLabonte"; - githubId = 9425955; - name = "Jean-François Labonté"; - }; jefferyoo = { email = "oojefferywm@proton.me"; github = "jefferyoo"; @@ -12084,6 +12078,12 @@ name = "Jeffery Oo"; keys = [ { fingerprint = "7129 408E 3D97 47EB FCE1 A6D5 1999 2BEC E706 CC59"; } ]; }; + jefflabonte = { + email = "jean-francois.labonte@brightonlabs.ai"; + github = "JeffLabonte"; + githubId = 9425955; + name = "Jean-François Labonté"; + }; jemand771 = { email = "willy@jemand771.net"; github = "jemand771"; diff --git a/pkgs/by-name/ke/keycloak/all-plugins.nix b/pkgs/by-name/ke/keycloak/all-plugins.nix index 96e6e248fd96..99f123433053 100644 --- a/pkgs/by-name/ke/keycloak/all-plugins.nix +++ b/pkgs/by-name/ke/keycloak/all-plugins.nix @@ -14,6 +14,7 @@ keycloak-orgs = callPackage ./keycloak-orgs { }; keycloak-remember-me-authenticator = callPackage ./keycloak-remember-me-authenticator { }; keycloak-restrict-client-auth = callPackage ./keycloak-restrict-client-auth { }; + keycloak-secrets-vault-provider = callPackage ./keycloak-secrets-vault-provider { }; scim-for-keycloak = callPackage ./scim-for-keycloak { }; scim-keycloak-user-storage-spi = callPackage ./scim-keycloak-user-storage-spi { }; diff --git a/pkgs/by-name/ke/keycloak/keycloak-secrets-vault-provider/default.nix b/pkgs/by-name/ke/keycloak/keycloak-secrets-vault-provider/default.nix index dec3efe0ac68..a229310c9c8f 100644 --- a/pkgs/by-name/ke/keycloak/keycloak-secrets-vault-provider/default.nix +++ b/pkgs/by-name/ke/keycloak/keycloak-secrets-vault-provider/default.nix @@ -16,8 +16,6 @@ maven.buildMavenPackage rec { mvnHash = "sha256-AJwt6JnNAffXzazWI2fIUMp5j/Fm5LRhO31bOUOl7g0="; - mvnParameters = "-Dmaven.test.skip"; - installPhase = '' runHook preInstall install -Dm644 target/secrets-provider-${version}.jar $out/share/java/keycloak/keycloak-secrets-vault-provider.jar @@ -28,6 +26,9 @@ maven.buildMavenPackage rec { homepage = "https://github.com/Nordix/keycloak-secrets-vault-provider"; description = "Keycloak Vault SPI provider for OpenBao and HashiCorp Vault"; license = lib.licenses.asl20; - maintainers = with lib.maintainers; [ krit ]; + maintainers = with lib.maintainers; [ + krit + anish + ]; }; } From 781bcf372b51a6c3ee0dfafc097db9e8903df2df Mon Sep 17 00:00:00 2001 From: Anish Pallati Date: Mon, 19 Jan 2026 05:40:58 -0500 Subject: [PATCH 11/11] keycloak.plugins: make out directory consistent across plugins --- .../ke/keycloak/keycloak-2fa-sms-authenticator/default.nix | 2 +- pkgs/by-name/ke/keycloak/keycloak-config-cli/default.nix | 2 +- pkgs/by-name/ke/keycloak/keycloak-discord/default.nix | 2 +- .../ke/keycloak/keycloak-enforce-mfa-authenticator/default.nix | 2 +- pkgs/by-name/ke/keycloak/keycloak-orgs/default.nix | 2 +- .../ke/keycloak/keycloak-secrets-vault-provider/default.nix | 2 +- 6 files changed, 6 insertions(+), 6 deletions(-) diff --git a/pkgs/by-name/ke/keycloak/keycloak-2fa-sms-authenticator/default.nix b/pkgs/by-name/ke/keycloak/keycloak-2fa-sms-authenticator/default.nix index d910858f0ecb..e456b5f6a83a 100644 --- a/pkgs/by-name/ke/keycloak/keycloak-2fa-sms-authenticator/default.nix +++ b/pkgs/by-name/ke/keycloak/keycloak-2fa-sms-authenticator/default.nix @@ -30,7 +30,7 @@ maven.buildMavenPackage rec { installPhase = '' runHook preInstall install -Dm644 sms-authenticator/target/netzbegruenung.sms-authenticator-v${version}.jar \ - $out/share/java/keycloak/keycloak-2fa-sms-authenticator.jar + $out/keycloak-2fa-sms-authenticator.jar runHook postInstall ''; diff --git a/pkgs/by-name/ke/keycloak/keycloak-config-cli/default.nix b/pkgs/by-name/ke/keycloak/keycloak-config-cli/default.nix index 61f6c1806a0f..2f9d8e722cba 100644 --- a/pkgs/by-name/ke/keycloak/keycloak-config-cli/default.nix +++ b/pkgs/by-name/ke/keycloak/keycloak-config-cli/default.nix @@ -21,7 +21,7 @@ maven.buildMavenPackage rec { installPhase = '' runHook preInstall - install -Dm444 target/keycloak-config-cli.jar "$out/keycloak-config-cli.jar" + install -Dm444 -t "$out" target/keycloak-config-cli.jar runHook postInstall ''; diff --git a/pkgs/by-name/ke/keycloak/keycloak-discord/default.nix b/pkgs/by-name/ke/keycloak/keycloak-discord/default.nix index 0e85c71c99a7..ec9958e45260 100644 --- a/pkgs/by-name/ke/keycloak/keycloak-discord/default.nix +++ b/pkgs/by-name/ke/keycloak/keycloak-discord/default.nix @@ -29,7 +29,7 @@ maven.buildMavenPackage rec { installPhase = '' runHook preInstall - install -Dm444 target/keycloak-discord-${version}.jar "$out/keycloak-discord-${version}.jar" + install -Dm444 -t "$out" target/keycloak-discord-${version}.jar runHook postInstall ''; diff --git a/pkgs/by-name/ke/keycloak/keycloak-enforce-mfa-authenticator/default.nix b/pkgs/by-name/ke/keycloak/keycloak-enforce-mfa-authenticator/default.nix index 2e8ecc4c0287..5a2f0bb9afa7 100644 --- a/pkgs/by-name/ke/keycloak/keycloak-enforce-mfa-authenticator/default.nix +++ b/pkgs/by-name/ke/keycloak/keycloak-enforce-mfa-authenticator/default.nix @@ -30,7 +30,7 @@ maven.buildMavenPackage rec { installPhase = '' runHook preInstall install -Dm644 enforce-mfa/target/netzbegruenung.enforce-mfa-v${version}.jar \ - $out/share/java/keycloak/keycloak-enforce-mfa-authenticator.jar + $out/keycloak-enforce-mfa-authenticator.jar runHook postInstall ''; diff --git a/pkgs/by-name/ke/keycloak/keycloak-orgs/default.nix b/pkgs/by-name/ke/keycloak/keycloak-orgs/default.nix index 43dfe7918cb6..ec8c0962bc64 100644 --- a/pkgs/by-name/ke/keycloak/keycloak-orgs/default.nix +++ b/pkgs/by-name/ke/keycloak/keycloak-orgs/default.nix @@ -21,7 +21,7 @@ maven.buildMavenPackage rec { installPhase = '' runHook preInstall - install -Dm644 target/keycloak-orgs-${version}.jar $out/share/java/keycloak/keycloak-orgs.jar + install -Dm644 -t "$out" target/keycloak-orgs-${version}.jar runHook postInstall ''; diff --git a/pkgs/by-name/ke/keycloak/keycloak-secrets-vault-provider/default.nix b/pkgs/by-name/ke/keycloak/keycloak-secrets-vault-provider/default.nix index a229310c9c8f..fa1c0f7cbee5 100644 --- a/pkgs/by-name/ke/keycloak/keycloak-secrets-vault-provider/default.nix +++ b/pkgs/by-name/ke/keycloak/keycloak-secrets-vault-provider/default.nix @@ -18,7 +18,7 @@ maven.buildMavenPackage rec { installPhase = '' runHook preInstall - install -Dm644 target/secrets-provider-${version}.jar $out/share/java/keycloak/keycloak-secrets-vault-provider.jar + install -Dm644 -t "$out/keycloak-secrets-vault-provider.jar" target/secrets-provider-${version}.jar runHook postInstall '';