mc-fucker/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Upstream unfortunately decided to deprecate the :latest tag

Browse source
This commit is contained in:
mc-fucker 2025-06-05 10:35:57 +02:00
parent 10a144b8c6
commit 0f33e4c58a
4 changed files with 8 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
modules/authentik-ldap.nix
View file

@ -4,6 +4,7 @@ with lib;
let let
cfg = config.services.authentik-ldap; cfg = config.services.authentik-ldap;
conf = import ./vars.nix; conf = import ./vars.nix;
version = conf.authentik.version;
in in
{ {
options = { options = {
@ -17,7 +18,7 @@ in
config = { config = {
virtualisation.oci-containers.containers."authentik-ldap" = { virtualisation.oci-containers.containers."authentik-ldap" = {
image = "ghcr.io/goauthentik/ldap"; image = "ghcr.io/goauthentik/ldap:${version}";
ports = [ ports = [
"389:3389" "389:3389"
"636:6636" "636:6636"

3
modules/authentik-proxy.nix
View file

@ -4,6 +4,7 @@ with lib;
let let
cfg = config.services.authentik-proxy; cfg = config.services.authentik-proxy;
conf = import ./vars.nix; conf = import ./vars.nix;
version = conf.authentik.version;
in in
{ {
options = { options = {
@ -17,7 +18,7 @@ in
config = { config = {
virtualisation.oci-containers.containers."authentik-proxy" = { virtualisation.oci-containers.containers."authentik-proxy" = {
image = "ghcr.io/goauthentik/proxy"; image = "ghcr.io/goauthentik/proxy:${version}";
ports = [ "9001:9000" ]; ports = [ "9001:9000" ];
environment = { environment = {
AUTHENTIK_HOST = "https://${conf.authentik.domain}"; AUTHENTIK_HOST = "https://${conf.authentik.domain}";

5
modules/authentik-server.nix
View file

@ -5,6 +5,7 @@ let
domain = cfg.authentik.domain; domain = cfg.authentik.domain;
redis = "6379"; redis = "6379";
port = cfg.authentik.port; port = cfg.authentik.port;
version = conf.authentik.version;
authentikEnvironment = { authentikEnvironment = {
TZ = "Europe/Berlin"; TZ = "Europe/Berlin";
AUTHENTIK_REDIS__HOST = cfg.podman.hostIP; AUTHENTIK_REDIS__HOST = cfg.podman.hostIP;
@ -57,7 +58,7 @@ in
}; };
virtualisation.oci-containers.containers.authentik-server = { virtualisation.oci-containers.containers.authentik-server = {
image = "ghcr.io/goauthentik/server"; image = "ghcr.io/goauthentik/server:${version}";
extraOptions = cfg.podman.extraOptions; extraOptions = cfg.podman.extraOptions;
cmd = [ "server" ]; cmd = [ "server" ];
dependsOn = [ dependsOn = [
@ -75,7 +76,7 @@ in
}; };
virtualisation.oci-containers.containers.authentik-worker = { virtualisation.oci-containers.containers.authentik-worker = {
image = "ghcr.io/goauthentik/server"; image = "ghcr.io/goauthentik/server:${version}";
extraOptions = cfg.podman.extraOptions; extraOptions = cfg.podman.extraOptions;
cmd = [ "worker" ]; cmd = [ "worker" ];
dependsOn = [ dependsOn = [

1
modules/vars.nix
View file

@ -22,6 +22,7 @@
domain = "auth.mc-fucker.cool"; domain = "auth.mc-fucker.cool";
port = "9000"; port = "9000";
outpostPort = "9001"; outpostPort = "9001";
version = "2025.4";
}; };
bookstack = { bookstack = {