move some redis servers around

flake.nix

@@ -37,6 +37,7 @@
     , vscode-server
     , course-management
     , print-interface
+    , authentik
     , ...
     }@inputs:
     let
@@ -75,10 +76,13 @@
             ese-manual.nixosModules.default
             course-management.nixosModules.default
             vscode-server.nixosModules.default
+            authentik.nixosModules.default
+
             ./hosts/quitte/configuration.nix
             ./options
 
             ./modules/core
+            ./modules/authentik
             ./modules/ldap
             ./modules/mail
             ./modules/web

modules/authentik/default.nix

@@ -1,11 +1,8 @@
-{ config, ... }:
+{ config, lib, ... }:
 let
   domain = "idm.${config.networking.domain}";
 in
 {
-  age.secrets.authentik-core = {
-    file = ../../../../secrets/nuc/authentik/core.age;
-  };
   sops.secrets."authentik/env" = { };
   services.authentik = {
     enable = true;
@@ -16,5 +13,4 @@ in
     };
     environmentFile = config.sops.secrets."authentik/env".path;
   };
-
 }

modules/mail/rspamd.nix

@@ -184,6 +184,7 @@ in
     redis = {
       vmOverCommit = true;
       servers.rspamd = {
+        port = 0;
         enable = true;
       };
     };

modules/zammad.nix

@@ -1,4 +1,4 @@
-{ config, ... }:
+{ config, lib, ... }:
 let
   domain = "tickets.${config.networking.domain}";
 in
@@ -9,11 +9,18 @@ in
       createLocally = true;
       type = "PostgreSQL";
     };
+    redis.port = 6380;
     port = 8085;
     secretKeyBaseFile = config.sops.secrets."zammad_secret".path;
   };
 
 
+    services.redis = {
+      servers.zammad = {
+        port = lib.mkForce 6380;
+        enable = true;
+      };
+    };
   # disably spammy logs
   systemd.services.zammad-web.preStart = ''
     sed -i -e "s|debug|warn|" ./config/environments/production.rb