David Arnold

Related to #47

@demianb Are there any plans with respect ot this or to #47 ? Might we help to sponsor such development? Please just shout out if you feel we should discuss...

Perfect @lina2358 will be contacting you in a few days with a more detailed write-up.

Some quick shared understanding in preparation of said that write-up: https://openid.net/connect/ Uncertified: https://github.com/jumbojett/OpenID-Connect-PHP Certified: https://bitbucket.org/PEOFIAMP/phpoidc/src/default/ (looks rather unusable) _[Standard Claims](https://openid.net/specs/openid-connect-core-1_0.html#StandardClaims)_ do not contain role information (in GOautodial called "User Groups")....

As for #47 - we can postpone that since it's use case would be to define and synchronize roles (_User Groups_) with an LDAP backend. EDIT: Actually an external LDAP...

This PR is an initial iteration for a `ragenix --generate` implementation. As a first iteration, this currently depends on that binaries used are made available within the environment, e.g. via...

I realize this approach is a bit incomplete, I haven't made up my mind, but especially cryptographic triplets (cert, key, chain) are very unhandy to manipulate atomically like this. I'm...

@veehaitch I decided that this is ready for review. The problem of cryptographic triplets shouldn't be a problem that ragenix tries to solve within the scope of the generate command.

This probably should be discussed upstream.

I think #52 (with `lib` support) can lead to similar results while relying on the `nix` language for string manipulation, rather than a "magical" rust implementation of globbing.