millironx/nix-dotfiles
1
0
Fork 0
Code Issues Pull requests Releases Packages Activity Actions

Compare commits

base: millironx:5b5aeea40b240489d10d2586675a6461a71e8f41
Branches Tags
millironx:master
millironx:feat/nixos-25.11
millironx:feat/mcentire-crowdsec
..
compare: millironx:bb9491e67358467bbe8ec94e6a2f323af70eaf63
Branches Tags
millironx:master
millironx:feat/nixos-25.11
millironx:feat/mcentire-crowdsec

No commits in common. "5b5aeea40b240489d10d2586675a6461a71e8f41" and "bb9491e67358467bbe8ec94e6a2f323af70eaf63" have entirely different histories.
5b5aeea40b ... bb9491e673

2 changed files with 0 additions and 23 deletions
Download patch file Download diff file Expand all files Collapse all files

BIN
secrets/authentik.toml.age
View file

Binary file not shown.

23
services/authentik.nix
View file

@ -75,15 +75,6 @@ in {
};
users.groups."${user}" = { };
services.crowdsec = {
localConfig.acquisitions = [{
source = "journalctl";
journalctl_filter = [ "_SYSTEMD_USER_UNIT=${user}.service" ];
labels.type = "authentik";
}];
hub.collections = [ "firix/authentik" ];
};
home-manager.users."${user}" = { config, osConfig, ... }: {
imports = [ home-manager-quadlet-nix ];
@ -147,18 +138,11 @@ in {
AUTHENTIK_POSTGRESQL__HOST = "authentik-db";
AUTHENTIK_POSTGRESQL__NAME = "${user}";
AUTHENTIK_POSTGRESQL__USER = "${user}";
AUTHENTIK_STORAGE__BACKEND = "s3";
};
exec = "worker";
secrets = [
"AUTHENTIK_POSTGRESQL__PASSWORD,type=env"
"AUTHENTIK_SECRET_KEY,type=env"
"AUTHENTIK_STORAGE__S3__ACCESS_KEY,type=env"
"AUTHENTIK_STORAGE__S3__SECRET_KEY,type=env"
"AUTHENTIK_STORAGE__S3__BUCKET_NAME,type=env"
"AUTHENTIK_STORAGE__S3__REGION,type=env"
"AUTHENTIK_STORAGE__S3__ENDPOINT,type=env"
"AUTHENTIK_STORAGE__S3__CUSTOM_DOMAIN,type=env"
];
volumes = [
# Remount media folder into new location based on
@ -185,7 +169,6 @@ in {
AUTHENTIK_POSTGRESQL__HOST = "authentik-db";
AUTHENTIK_POSTGRESQL__NAME = "${user}";
AUTHENTIK_POSTGRESQL__USER = "${user}";
AUTHENTIK_STORAGE__BACKEND = "s3";
};
exec = "server";
secrets = [
@ -197,12 +180,6 @@ in {
"AUTHENTIK_EMAIL__PASSWORD,type=env"
"AUTHENTIK_EMAIL__USE_SSL,type=env"
"AUTHENTIK_EMAIL__FROM,type=env"
"AUTHENTIK_STORAGE__S3__ACCESS_KEY,type=env"
"AUTHENTIK_STORAGE__S3__SECRET_KEY,type=env"
"AUTHENTIK_STORAGE__S3__BUCKET_NAME,type=env"
"AUTHENTIK_STORAGE__S3__REGION,type=env"
"AUTHENTIK_STORAGE__S3__ENDPOINT,type=env"
"AUTHENTIK_STORAGE__S3__CUSTOM_DOMAIN,type=env"
];
# Change from Traefik: publish ports to localhost only via 127.0.0.1