cnst/cnix
1
0
Fork 0
Code Issues Pull Requests Activity

chore(revert): slowly introducing changes

Browse Source
This commit is contained in:
cnst
2025-10-05 09:27:51 +02:00
parent 67e83e3e4e
commit c9edc99a85
6 changed files with 116 additions and 107 deletions
Download Patch File Download Diff File Expand all files Collapse all files

29
modules/server/authentik/default.nix
View File

@@ -4,11 +4,13 @@
pkgs,
self,
...
}: let
}:
let
unit = "authentik";
cfg = config.server.${unit};
srv = config.server;
in {
in
{
options.server.${unit} = {
enable = lib.mkEnableOption {
description = "Enable ${unit}";
@@ -53,15 +55,9 @@ in {
age.secrets = {
authentikEnv = {
file = "${self}/secrets/authentikEnv.age";
owner = "authentik";
group = "authentik";
mode = "0400";
};
authentikCloudflared = {
file = "${self}/secrets/authentikCloudflared.age";
owner = "authentik";
group = "authentik";
mode = "0400";
};
};
@@ -110,15 +106,16 @@ in {
"X-authentik-username"
"X-authentik-groups"
"X-authentik-email"
"X-authentik-name"
"X-authentik-uid"
# "X-authentik-name"
# "X-authentik-uid"
"X-authentik-jwt"
"X-authentik-meta-jwks"
"X-authentik-meta-outpost"
"X-authentik-meta-provider"
"X-authentik-meta-app"
"X-authentik-meta-version"
# "X-authentik-meta-jwks"
# "X-authentik-meta-outpost"
# "X-authentik-meta-provider"
# "X-authentik-meta-app"
# "X-authentik-meta-version"
];
timeout = "10s";
};
};
};
@@ -133,7 +130,7 @@ in {
routers = {
auth = {
entryPoints = ["websecure"];
entryPoints = [ "websecure" ];
rule = "Host(`${cfg.url}`) || HostRegexp(`{subdomain:[a-z0-9]+}.${srv.www.url}`) && PathPrefix(`/outpost.goauthentik.io/`)";
service = "auth";
tls.certResolver = "letsencrypt";

17
modules/server/www/default.nix
View File

@@ -4,11 +4,18 @@
pkgs,
self,
...
}: let
inherit (lib) mkOption mkEnableOption mkIf types;
}:
let
inherit (lib)
mkOption
mkEnableOption
mkIf
types
;
cfg = config.server.www;
srv = config.server;
in {
in
{
options.server.www = {
enable = mkEnableOption {
description = "Enable personal website";
@@ -117,14 +124,14 @@ in {
services.traefik.dynamicConfigOptions.http = {
routers.webfinger = {
entryPoints = ["websecure"];
entryPoints = [ "websecure" ];
rule = "Host(`${cfg.url}`) && Path(`/.well-known/webfinger`)";
service = "webfinger";
tls.certResolver = "letsencrypt";
};
services.webfinger.loadBalancer.servers = [
{url = "http://127.0.0.1:8283";}
{ url = "http://127.0.0.1:8283"; }
];
};
};