sprechtl/dotfiles
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: user for authentik

Browse source
This commit is contained in:
s-prechtl 2026-03-22 20:23:24 +01:00
parent 48aaed53ae
commit 67c62dae3d
1 changed files with 20 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

29
hosts/hitsugibune/authentik.nix
View file

@ -1,8 +1,16 @@
{config, ...}: { { config, ... }:
{
age.secrets.authentik-env = { age.secrets.authentik-env = {
file = ../../secrets/authentik.age; file = ../../secrets/authentik.age;
}; };
users.users.authentik = {
isSystemUser = true;
group = "authentik";
};
users.groups.authentik = {};
services.authentik = { services.authentik = {
enable = true; enable = true;
environmentFile = config.age.secrets.authentik-env.path; environmentFile = config.age.secrets.authentik-env.path;
@ -15,8 +23,6 @@
user = "authentik"; user = "authentik";
}; };
}; };
nginx = { nginx = {
enable = true; enable = true;
enableACME = true; enableACME = true;
@ -25,10 +31,15 @@
}; };
services.postgresql = { services.postgresql = {
ensureDatabases = [ "authentik" ]; ensureDatabases = [ "authentik" ];
ensureUsers = [{ ensureUsers = [{
name = "authentik"; name = "authentik";
ensureDBOwnership = true; ensureDBOwnership = true;
}]; }];
}; };
services.redis.servers.authentik = {
enable = true;
port = 0;
};
} }