working 1

hosts/kima/modules.nix

@@ -216,7 +216,7 @@
         flags = "--performance";
       };
       tailscale = {
-        enable = false;
+        enable = true;
       };
       udisks = {
         enable = true;

hosts/sobotka/modules.nix

@@ -214,7 +214,7 @@
         flags = "--performance";
       };
       tailscale = {
-        enable = false;
+        enable = true;
       };
       udisks = {
         enable = true;

modules/server/authentik/default.nix

@@ -54,14 +54,10 @@ in {
       authentikEnv = {
         file = "${self}/secrets/authentikEnv.age";
         owner = "authentik";
-        group = "authentik";
-        mode = "0400";
       };
       authentikCloudflared = {
         file = "${self}/secrets/authentikCloudflared.age";
         owner = "authentik";
-        group = "authentik";
-        mode = "0400";
       };
     };
 
@@ -103,7 +99,7 @@ in {
             middlewares = {
               authentik = {
                 forwardAuth = {
-                  # tls.insecureSkipVerify = true;
+                  tls.insecureSkipVerify = true;
                   address = "https://localhost:9443/outpost.goauthentik.io/auth/traefik";
                   trustForwardHeader = true;
                   authResponseHeaders = [
@@ -119,7 +115,6 @@ in {
                     "X-authentik-meta-app"
                     "X-authentik-meta-version"
                   ];
-                  timeout = "10s";
                 };
               };
             };

modules/server/www/default.nix

@@ -4,18 +4,11 @@
   pkgs,
   self,
   ...
-}:
-let
-  inherit (lib)
-    mkOption
-    mkEnableOption
-    mkIf
-    types
-    ;
+}: let
+  inherit (lib) mkOption mkEnableOption mkIf types;
   cfg = config.server.www;
   srv = config.server;
-in
-{
+in {
   options.server.www = {
     enable = mkEnableOption {
       description = "Enable personal website";

users/cnst/modules/kimamod.nix

@@ -11,7 +11,7 @@
         enable = true;
       };
       chromium = {
-        enable = false;
+        enable = true;
       };
       discord = {
         enable = true;