hosts/auth/authentik.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17

{ config, inputs, ... }:
{
  imports = [
    inputs.authentik-nix.nixosModules.default
  ];
  sops.secrets."authentik/env" = { };
  services.authentik = {
    enable = true;
    environmentFile = config.sops.secrets."authentik/env".path;
    settings = {
      log_level = "debug";
      disable_startup_analytics = true;
      avatars = "initials";
      postgresql.host = "/run/postgresql";
    };
  };
}