working 1

hosts/kima/modules.nix

@@ -216,7 +216,7 @@
         flags = "--performance";
       };
       tailscale = {
-        enable = false;
+        enable = true;
       };
       udisks = {
         enable = true;

hosts/sobotka/modules.nix

@@ -214,7 +214,7 @@
         flags = "--performance";
       };
       tailscale = {
-        enable = false;
+        enable = true;
       };
       udisks = {
         enable = true;

modules/server/authentik/default.nix

@@ -54,14 +54,10 @@ in {
       authentikEnv = {
         file = "${self}/secrets/authentikEnv.age";
         owner = "authentik";
-        group = "authentik";
-        mode = "0400";
       };
       authentikCloudflared = {
         file = "${self}/secrets/authentikCloudflared.age";
         owner = "authentik";
-        group = "authentik";
-        mode = "0400";
       };
     };
 
@@ -103,7 +99,7 @@ in {
             middlewares = {
               authentik = {
                 forwardAuth = {
-                  # tls.insecureSkipVerify = true;
+                  tls.insecureSkipVerify = true;
                   address = "https://localhost:9443/outpost.goauthentik.io/auth/traefik";
                   trustForwardHeader = true;
                   authResponseHeaders = [
@@ -119,7 +115,6 @@ in {
                     "X-authentik-meta-app"
                     "X-authentik-meta-version"
                   ];
-                  timeout = "10s";
                 };
               };
             };

modules/server/www/default.nix

@@ -4,18 +4,11 @@
   pkgs,
   self,
   ...
-}:
+}: let
-let
+  inherit (lib) mkOption mkEnableOption mkIf types;
-  inherit (lib)
-    mkOption
-    mkEnableOption
-    mkIf
-    types
-    ;
   cfg = config.server.www;
   srv = config.server;
-in
+in {
-{
   options.server.www = {
     enable = mkEnableOption {
       description = "Enable personal website";
@@ -124,14 +117,14 @@ in
 
     services.traefik.dynamicConfigOptions.http = {
       routers.webfinger = {
-        entryPoints = [ "websecure" ];
+        entryPoints = ["websecure"];
         rule = "Host(`${cfg.url}`) && Path(`/.well-known/webfinger`)";
         service = "webfinger";
         tls.certResolver = "letsencrypt";
       };
 
       services.webfinger.loadBalancer.servers = [
-        { url = "http://127.0.0.1:8283"; }
+        {url = "http://127.0.0.1:8283";}
       ];
     };
   };

users/cnst/modules/kimamod.nix

@@ -11,7 +11,7 @@
         enable = true;
       };
       chromium = {
-        enable = false;
+        enable = true;
       };
       discord = {
         enable = true;