39 lines
918 B
Nix
39 lines
918 B
Nix
<<<<<<< HEAD
|
|
{ config, pkgs ... }:
|
|
let
|
|
inherit (config.serverConfig) vhosts;
|
|
inherit (config.networking) domain;
|
|
in
|
|
in {
|
|
age.secrets.authentik_env = {
|
|
file = ../secrets/authentik_env.age;
|
|
# owner = "authentik";
|
|
# group = "authentik";
|
|
mode = "0600";
|
|
};
|
|
|
|
services.authentik = {
|
|
# enable = true;
|
|
# The environmentFile needs to be on the target host!
|
|
# Best use something like sops-nix or agenix to manage it
|
|
environmentFile = config.age.secrets.authentik_env.path;
|
|
|
|
# authentikComponents = {
|
|
# staticWorkdirDeps = pkgs.authentikComponents.staticWorkdirDeps;
|
|
# };
|
|
|
|
settings = {
|
|
email = rec {
|
|
host = vhosts.mail_host.host;
|
|
port = 465;
|
|
username = "admin@${domain}";
|
|
use_tls = true;
|
|
use_ssl = true;
|
|
from = username;
|
|
};
|
|
disable_startup_analytics = true;
|
|
avatars = "initials";
|
|
};
|
|
};
|
|
}
|