feat: authentik

hosts/goingmerry/configuration.nix

@@ -319,7 +319,7 @@
     fprintd.enable = true;
     blueman.enable = true;
     onedrive.enable = true;
-    udev.packages = [ pkgs.yubikey-personalization ];
+    udev.packages = [pkgs.yubikey-personalization];
   };
 
   # List services that you want to enable:

hosts/hitsugibune/authentik.nix

@@ -0,0 +1,20 @@
+{config, ...}: {
+  age.secrets.authentik-env = {
+    file = ../../secrets/authentik.age;
+  };
+
+  services.authentik = {
+    enable = true;
+    environmentFile = config.age.secrets.authentik-env.path;
+    settings = {
+      disable_startup_analytics = true;
+      avatars = "initials";
+    };
+
+    nginx = {
+      enable = true;
+      enableACME = true;
+      host = "auth.sprechtl.me";
+    };
+  };
+}