mirror of
https://git.sr.ht/~rouven/nixos-config
synced 2024-11-15 13:23:11 +01:00
24 lines
586 B
Nix
24 lines
586 B
Nix
{ config, ... }:
|
|
let
|
|
domain = "auth.${config.networking.domain}";
|
|
in
|
|
{
|
|
age.secrets.authentik-core = {
|
|
file = ../../../../secrets/nuc/authentik/core.age;
|
|
};
|
|
age.secrets.authentik-ldap = {
|
|
file = ../../../../secrets/nuc/authentik/ldap.age;
|
|
};
|
|
services.authentik = {
|
|
enable = true;
|
|
environmentFile = config.age.secrets.authentik-core.path;
|
|
};
|
|
services.authentik-ldap = {
|
|
enable = true;
|
|
environmentFile = config.age.secrets.authentik-ldap.path;
|
|
};
|
|
services.caddy.virtualHosts."${domain}".extraConfig = ''
|
|
reverse_proxy localhost:9000
|
|
'';
|
|
}
|