tristan/nix
1
0
Fork 0
Code Projects Releases Packages Activity

alpine: update authentik

Browse source
This commit is contained in:
Tristan 2026-03-08 14:48:02 +00:00
parent 1986f31d39
commit b5e1d0081c
1 changed files with 2 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

14
nixos/services/authentik.nix
View file

@ -1,7 +1,6 @@
{config, ...}: let {config, ...}: let
inherit (config) sops; inherit (config) sops;
inherit (sops) templates placeholder; inherit (sops) templates placeholder;
redis_port = "6380";
authentik_port = "8084"; authentik_port = "8084";
postgres = { postgres = {
user = "authentik"; user = "authentik";
@ -10,19 +9,17 @@
}; };
authentik-config = { authentik-config = {
autoStart = true; autoStart = true;
image = "ghcr.io/goauthentik/server:2025.8.4"; image = "ghcr.io/goauthentik/server:2026.2.1";
volumes = ["/home/tristan/pods/authentik/media:/media"]; volumes = ["/home/tristan/pods/authentik/media:/media"];
environment = { environment = {
AUTHENTIK_POSTGRESQL__USER = postgres.user; AUTHENTIK_POSTGRESQL__USER = postgres.user;
AUTHENTIK_POSTGRESQL__HOST = "192.168.1.2"; AUTHENTIK_POSTGRESQL__HOST = "192.168.1.2";
AUTHENTIK_POSTGRESQL__PORT = postgres.port; AUTHENTIK_POSTGRESQL__PORT = postgres.port;
AUTHENTIK_REDIS__HOST = "192.168.1.2";
AUTHENTIK_REDIS__PORT = redis_port;
AUTHENTIK_EMAIL__FROM = "Authentik <tristan@tristans.cloud>"; AUTHENTIK_EMAIL__FROM = "Authentik <tristan@tristans.cloud>";
AUTHENTIK_DEFAULT_USER_CHANGE_USERNAME = "false"; AUTHENTIK_DEFAULT_USER_CHANGE_USERNAME = "false";
}; };
environmentFiles = [templates."authentik/environment".path]; environmentFiles = [templates."authentik/environment".path];
dependsOn = ["authentik-redis" "authentik-postgres"]; dependsOn = ["authentik-postgres"];
}; };
in { in {
sops.secrets = { sops.secrets = {
@ -53,13 +50,6 @@ in {
}; };
}; };
virtualisation.oci-containers.containers = { virtualisation.oci-containers.containers = {
authentik-redis = {
autoStart = true;
image = "redis:7.2-alpine";
ports = ["${redis_port}:6379"];
volumes = ["authentik-redis:/data"];
};
authentik-server = authentik-server =
authentik-config authentik-config
// { // {