common: move to modules, move some files out, modules: adjust dir structure
This commit is contained in:
parent
ed5f8c3ae6
commit
0bc9abc4c0
43 changed files with 86 additions and 83 deletions
31
modules/nixos/services/homeserver/authentik.nix
Executable file
31
modules/nixos/services/homeserver/authentik.nix
Executable file
|
|
@ -0,0 +1,31 @@
|
|||
{ inputs, config, ... }:
|
||||
|
||||
{
|
||||
imports = [ inputs.authentik-nix.nixosModules.default ];
|
||||
nix.settings = {
|
||||
substituters = [ "https://nix-community.cachix.org" ];
|
||||
trusted-public-keys = [ "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs=" ];
|
||||
};
|
||||
|
||||
sops.secrets."authentik/secrets.env".restartUnits = [ "authentik.service" ];
|
||||
|
||||
services.caddy.virtualHosts."authentik.wo2wz.fyi".extraConfig =
|
||||
assert config.services.caddy.enable;
|
||||
''
|
||||
import default-settings
|
||||
import cloudflare-tls
|
||||
|
||||
reverse_proxy localhost:9000
|
||||
'';
|
||||
|
||||
services.authentik = {
|
||||
enable = true;
|
||||
environmentFile = config.sops.secrets."authentik/secrets.env".path;
|
||||
|
||||
settings = {
|
||||
disable_startup_analytics = true;
|
||||
disable_update_check = true;
|
||||
avatars = "initials";
|
||||
};
|
||||
};
|
||||
}
|
||||
Loading…
Add table
Add a link
Reference in a new issue