draft: partially getting authentik to work

needs manual systemctl start once booted for now its started at auth.tuxcord.test
2026-05-05 00:02:34 +02:00
parent 82c76dc390
commit 833a21b1c1
8 changed files with 328 additions and 13 deletions
@@ -0,0 +1,17 @@
+{ config, self, ... }:
+let
+  inherit (config.networking) fqdn;
+in
+{
+  age.secrets.authentik.file = "${self}/agenix/authentik.age";
+
+  services.authentik = {
+    enable = true;
+    environmentFile = config.age.secrets.authentik.path; # just trust, this specifies port 3001
+    # nginx = {
+    #   enable = true;
+    #   enableACME = true;
+    #   host = "auth.${fqdn}";
+    # };
+  };
+}