add basic authentik

This commit is contained in:
Noa Aarts 2025-05-04 16:42:08 +02:00
parent 2e58acb9e7
commit a8d547d213
Signed by: noa
GPG key ID: 1850932741EFF672
5 changed files with 422 additions and 154 deletions

View file

@ -249,6 +249,7 @@ in
"secrets/nix-store-key".file = ../../secrets/nix-serve/private.age;
"discord/disqalculate".file = ../../secrets/discord/disqalculate.age;
"factorio/solrunners".file = ../../secrets/factorio/solrunners.age;
"authentik/env".file = ../../secrets/authentik/env.age;
"rsecrets/radicale" = {
file = ../../secrets/radicale/htpasswd.age;
owner = "radicale";
@ -258,6 +259,19 @@ in
};
services = {
authentik = {
enable = true;
environmentFile = config.age.secrets."authentik/env".path;
nginx = {
enable = true;
enableACME = true;
host = "auth.itepastra.nl";
};
settings = {
disable_startup_analytics = true;
avatars = "initials";
};
};
factorio = {
enable = true;
package = pkgs.factorio-headless.override {