tristan/nix
1
0
Fork 0
Code Projects Releases Packages Activity

alpine: update authentik

Browse source
This commit is contained in:
Tristan 2026-03-08 14:48:02 +00:00
parent 1986f31d39
commit b5e1d0081c
1 changed files with 2 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

14
nixos/services/authentik.nix
View file

@ -1,7 +1,6 @@
{config, ...}: let
inherit (config) sops;
inherit (sops) templates placeholder;
redis_port = "6380";
authentik_port = "8084";
postgres = {
user = "authentik";
@ -10,19 +9,17 @@
};
authentik-config = {
autoStart = true;
image = "ghcr.io/goauthentik/server:2025.8.4";
image = "ghcr.io/goauthentik/server:2026.2.1";
volumes = ["/home/tristan/pods/authentik/media:/media"];
environment = {
AUTHENTIK_POSTGRESQL__USER = postgres.user;
AUTHENTIK_POSTGRESQL__HOST = "192.168.1.2";
AUTHENTIK_POSTGRESQL__PORT = postgres.port;
AUTHENTIK_REDIS__HOST = "192.168.1.2";
AUTHENTIK_REDIS__PORT = redis_port;
AUTHENTIK_EMAIL__FROM = "Authentik <tristan@tristans.cloud>";
AUTHENTIK_DEFAULT_USER_CHANGE_USERNAME = "false";
};
environmentFiles = [templates."authentik/environment".path];
dependsOn = ["authentik-redis" "authentik-postgres"];
dependsOn = ["authentik-postgres"];
};
in {
sops.secrets = {
@ -53,13 +50,6 @@ in {
};
};
virtualisation.oci-containers.containers = {
authentik-redis = {
autoStart = true;
image = "redis:7.2-alpine";
ports = ["${redis_port}:6379"];
volumes = ["authentik-redis:/data"];
};
authentik-server =
authentik-config
// {