xyno/nix-configs
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

authentik ldap

Browse source
This commit is contained in:
Lucy Hochkamp 2025-02-27 13:06:38 +01:00
parent 18403cff70
commit 9eaf15ca39
No known key found for this signature in database
3 changed files with 16 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

15
hosts/ds9/authentik.nix
View file

@ -4,6 +4,7 @@
inputs.quadlet-nix.nixosModules.quadlet inputs.quadlet-nix.nixosModules.quadlet
]; ];
ragon.agenix.secrets.ds9AuthentikEnv = { }; ragon.agenix.secrets.ds9AuthentikEnv = { };
ragon.agenix.secrets.ds9AuthentikLdapEnv = { };
virtualisation.quadlet = virtualisation.quadlet =
{ {
containers = { containers = {
@ -53,6 +54,20 @@
config.age.secrets.ds9AuthentikEnv.path config.age.secrets.ds9AuthentikEnv.path
]; ];
authentik-worker.serviceConfig.TimeoutStartSec = "60"; authentik-worker.serviceConfig.TimeoutStartSec = "60";
authentik-ldap.containerConfig.image = "ghcr.io/goauthentik/ldap:2024.12.3";
authentik-ldap.containerConfig.networks = [
"podman"
"authentik-net"
];
authentik-ldap.containerConfig.environments = {
AUTHENTIK_HOST = "http://authentik-server:9000";
AUTHENTIK_INSECURE = "true";
};
authentik-ldap.containerConfig.environmentFiles = [
config.age.secrets.ds9AuthentikLdapEnv.path
];
authentik-ldap.serviceConfig.TimeoutStartSec = "60";
authentik-redis.containerConfig.image = "docker.io/library/redis:alpine"; authentik-redis.containerConfig.image = "docker.io/library/redis:alpine";
authentik-redis.containerConfig.networks = [ authentik-redis.containerConfig.networks = [
"authentik-net" "authentik-net"

BIN
secrets/ds9AuthentikLdapEnv.age Normal file
View file

Binary file not shown.

1
secrets/secrets.nix
View file

@ -21,6 +21,7 @@ in
"ds9PostgresEnv.age".publicKeys = pubkeys.ragon.host "ds9"; "ds9PostgresEnv.age".publicKeys = pubkeys.ragon.host "ds9";
"ds9ImmichEnv.age".publicKeys = pubkeys.ragon.host "ds9"; "ds9ImmichEnv.age".publicKeys = pubkeys.ragon.host "ds9";
"ds9AuthentikEnv.age".publicKeys = pubkeys.ragon.host "ds9"; "ds9AuthentikEnv.age".publicKeys = pubkeys.ragon.host "ds9";
"ds9AuthentikLdapEnv.age".publicKeys = pubkeys.ragon.host "ds9";
"gatebridgeHostKeys.age".publicKeys = pubkeys.ragon.server; "gatebridgeHostKeys.age".publicKeys = pubkeys.ragon.server;
"plausibleAdminPw.age".publicKeys = pubkeys.ragon.host "picard"; "plausibleAdminPw.age".publicKeys = pubkeys.ragon.host "picard";
"plausibleGoogleClientId.age".publicKeys = pubkeys.ragon.host "picard"; "plausibleGoogleClientId.age".publicKeys = pubkeys.ragon.host "picard";