rouven.seifert/nixos-config
1
1
Fork 0
mirror of https://git.sr.ht/~rouven/nixos-config synced 2025-04-28 09:28:30 +02:00
Code Issues Projects Releases Packages Wiki Activity

auth updates

Browse source
This commit is contained in:
Rouven Seifert 2024-06-22 16:27:40 +02:00
parent 3d76e6ecab
commit bff20285d2
2 changed files with 11 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

8
hosts/nuc/modules/authentik/default.nix
View file

@ -12,7 +12,15 @@ in
services.authentik = {
enable = true;
environmentFile = config.age.secrets.authentik-core.path;
settings = {
cert_discovery_dir = "env://CREDENTIALS_DIRECTORY";
};
};
systemd.services.authentik-worker.serviceConfig.LoadCredential = [
"${domain}.pem:/var/lib/caddy/certificates/acme-v02.api.letsencrypt.org-directory/${domain}/${domain}.crt"
"${domain}.key:/var/lib/caddy/certificates/acme-v02.api.letsencrypt.org-directory/${domain}/${domain}.key"
];
services.authentik-ldap = {
enable = true;
environmentFile = config.age.secrets.authentik-ldap.path;