nix
/
authentik-container
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add secret

This commit is contained in:
niten 2023-08-29 09:57:21 -07:00
parent 8198d10619
commit 383f721f2a
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
authentik-container.nix
View File

@ -20,6 +20,10 @@ let
pkgs.lib.passwd.stablerandom-passwd-file "authentik-postgresql-passwd"
config.instance.build-seed;
authentikSecretKeyFile =
pkgs.lib.passwd.stablerandom-passwd-file "authentik-secret-key"
config.instance.build-seed;
in {
options.services.authentikContainer = with types; {
enable = mkEnableOption "Enable Authentik running in an Arion container.";
@ -103,6 +107,7 @@ in {
AUTHENTIK_POSTGRESQL__NAME = "authentik";
AUTHENTIK_POSTGRESQL__USER = "authentik";
AUTHENTIK_POSTGRESQL__PASSWORD = readFile postgresPasswdFile;
AUTHENTIK_SECRET_KEY = readFile authentikSecretKeyFile;
};
target-file = "/run/authentik/authentik.env";
};