nix/machines
1
0
Fork 0
Code Issues Releases Packages Activity Actions

Build authentik as well

Browse source 
Former-commit-id: 7cad695983
This commit is contained in:
Kaare Hoff Skovgaard 2025-07-15 08:30:57 +02:00
parent 3e4db99246
commit 7e7ffbb4c4
1 changed files with 59 additions and 60 deletions
Download patch file Download diff file Expand all files Collapse all files

119
nix/systems/aarch64-linux/security.kaareskovgaard.net/authentik.nix
View file

@ -1,61 +1,60 @@
# { config, ... }:
# let
# secretsFile = "/var/lib/authentik/authentik-env";
# domain = "auth-test.kaareskovgaard.net";
# in
# {
# config = {
# khscodes.nix.nix-community.enable = true;
# services.authentik = {
# enable = true;
# environmentFile = secretsFile;
# settings = {
# email = {
# host = "smtp.soverin.net";
# port = 587;
# username = "kaare@kaareskovgaard.net";
# use_tls = true;
# use_ssl = false;
# from = "kaare@kaareskovgaard.net";
# };
# disable_startup_analytics = true;
# avatars = "initials";
# };
# };
# khscodes.services.nginx.virtualHosts.${domain} = {
# locations."/" = {
# proxyPass = "https://localhost:9443";
# recommendedProxySettings = true;
# };
# };
# services.postgresqlBackup = {
# enable = true;
# databases = [ "authentik" ];
# };
{ config, ... }:
let
secretsFile = "/var/lib/authentik/authentik-env";
domain = "auth-test.kaareskovgaard.net";
in
{
config = {
khscodes.nix.nix-community.enable = true;
services.authentik = {
enable = true;
environmentFile = secretsFile;
settings = {
email = {
host = "smtp.soverin.net";
port = 587;
username = "kaare@kaareskovgaard.net";
use_tls = true;
use_ssl = false;
from = "kaare@kaareskovgaard.net";
};
disable_startup_analytics = true;
avatars = "initials";
};
};
khscodes.services.nginx.virtualHosts.${domain} = {
locations."/" = {
proxyPass = "https://localhost:9443";
recommendedProxySettings = true;
};
};
services.postgresqlBackup = {
enable = true;
databases = [ "authentik" ];
};
# systemd.services = {
# authentik-migrate = {
# unitConfig = {
# ConditionPathExists = secretsFile;
# };
# };
# authentik-worker = {
# unitConfig = {
# ConditionPathExists = secretsFile;
# };
# serviceConfig = {
# LoadCredential = [
# "${domain}.pem:${config.security.acme.certs.${domain}.directory}/fullchain.pem"
# "${domain}.key:${config.security.acme.certs.${domain}.directory}/key.pem"
# ];
# };
# };
# authentik = {
# unitConfig = {
# ConditionPathExists = secretsFile;
# };
# };
# };
# };
# }
{ }
systemd.services = {
authentik-migrate = {
unitConfig = {
ConditionPathExists = secretsFile;
};
};
authentik-worker = {
unitConfig = {
ConditionPathExists = secretsFile;
};
serviceConfig = {
LoadCredential = [
"${domain}.pem:${config.security.acme.certs.${domain}.directory}/fullchain.pem"
"${domain}.key:${config.security.acme.certs.${domain}.directory}/key.pem"
];
};
};
authentik = {
unitConfig = {
ConditionPathExists = secretsFile;
};
};
};
};
}