From 4fc11e17fa849f366afed9944c30b58b265789a2 Mon Sep 17 00:00:00 2001 From: blaknull Date: Sat, 9 Nov 2024 15:50:55 -0600 Subject: [PATCH] switch to arion for authentik --- flake.lock | 18 +++---- .../configuration/homebox/default.nix | 2 + .../containers/authentik/arion-compose.nix | 47 +++++++++++++++++++ .../services/containers/authentik/default.nix | 2 +- system-config/services/containers/default.nix | 3 +- 5 files changed, 61 insertions(+), 11 deletions(-) create mode 100644 system-config/services/containers/authentik/arion-compose.nix diff --git a/flake.lock b/flake.lock index 4c765ad..942e58a 100644 --- a/flake.lock +++ b/flake.lock @@ -1385,11 +1385,11 @@ "locked": { "lastModified": 1, "narHash": "sha256-oZvEsOQ8vT4Gq/IyMfDxZlv2ntum+qC+48boiOPam0Q=", - "path": "/nix/store/gfrrk7h8wina4759nyiskw5mpkdsz1cq-source/home-manager", + "path": "/nix/store/s073llq4dcg4xbk4n1xxl2nfymn7l1qy-source/home-manager", "type": "path" }, "original": { - "path": "/nix/store/gfrrk7h8wina4759nyiskw5mpkdsz1cq-source/home-manager", + "path": "/nix/store/s073llq4dcg4xbk4n1xxl2nfymn7l1qy-source/home-manager", "type": "path" } }, @@ -2066,11 +2066,11 @@ "locked": { "lastModified": 1, "narHash": "sha256-HAuZ9X84fuwUcit6NWUoJCjHj+29nST/YN6Rs8JQugY=", - "path": "/nix/store/0fsbd1c5xzyxkgnzcbhr2rj0sw3av7lx-source/programs", + "path": "/nix/store/lzi0acc70g9dvd7005816byna5gz6dba-source/programs", "type": "path" }, "original": { - "path": "/nix/store/0fsbd1c5xzyxkgnzcbhr2rj0sw3av7lx-source/programs", + "path": "/nix/store/lzi0acc70g9dvd7005816byna5gz6dba-source/programs", "type": "path" } }, @@ -2142,11 +2142,11 @@ "locked": { "lastModified": 1, "narHash": "sha256-0Ztx5DVQ2I7hvCK/qjGa4XTdRgbzM8rhf19m0al8lVM=", - "path": "/nix/store/0fsbd1c5xzyxkgnzcbhr2rj0sw3av7lx-source/services/sddm", + "path": "/nix/store/lzi0acc70g9dvd7005816byna5gz6dba-source/services/sddm", "type": "path" }, "original": { - "path": "/nix/store/0fsbd1c5xzyxkgnzcbhr2rj0sw3av7lx-source/services/sddm", + "path": "/nix/store/lzi0acc70g9dvd7005816byna5gz6dba-source/services/sddm", "type": "path" } }, @@ -2213,12 +2213,12 @@ }, "locked": { "lastModified": 1, - "narHash": "sha256-aQc9qbPf9F4pRBZTT08VVGFsOMypSaekgBPP7n5tAZs=", - "path": "/nix/store/gfrrk7h8wina4759nyiskw5mpkdsz1cq-source/system-config", + "narHash": "sha256-MWV/+CgMGyRUh1JT91p9icCSq/pwO77epMiVjog4N9w=", + "path": "/nix/store/s073llq4dcg4xbk4n1xxl2nfymn7l1qy-source/system-config", "type": "path" }, "original": { - "path": "/nix/store/gfrrk7h8wina4759nyiskw5mpkdsz1cq-source/system-config", + "path": "/nix/store/s073llq4dcg4xbk4n1xxl2nfymn7l1qy-source/system-config", "type": "path" } }, diff --git a/system-config/configuration/homebox/default.nix b/system-config/configuration/homebox/default.nix index 5783b2a..9f3bb03 100644 --- a/system-config/configuration/homebox/default.nix +++ b/system-config/configuration/homebox/default.nix @@ -138,6 +138,8 @@ dive podman-tui podman-compose + arion + docker-client ]; boot.initrd.postDeviceCommands = lib.mkAfter '' diff --git a/system-config/services/containers/authentik/arion-compose.nix b/system-config/services/containers/authentik/arion-compose.nix new file mode 100644 index 0000000..f58573e --- /dev/null +++ b/system-config/services/containers/authentik/arion-compose.nix @@ -0,0 +1,47 @@ +{ pkgs, ... }: { + + project.name = "authentik"; + + services = { + + postgres.service = { + image = ""; + restart = ""; + command = ""; + volumes = []; + healthcheck = {}; + user = ""; + env_file = ""; + }; + + redis.service = { + image = ""; + restart = ""; + command = ""; + volumes = []; + healthcheck = {}; + user = ""; + env_file = ""; + }; + + server.service = { + image = ""; + restart = ""; + command = ""; + volumes = []; + healthcheck = {}; + user = ""; + env_file = ""; + }; + + worker.service = { + image = ""; + restart = ""; + command = ""; + volumes = []; + healthcheck = {}; + user = ""; + env_file = ""; + }; + }; +} diff --git a/system-config/services/containers/authentik/default.nix b/system-config/services/containers/authentik/default.nix index f3d8317..e7f8412 100644 --- a/system-config/services/containers/authentik/default.nix +++ b/system-config/services/containers/authentik/default.nix @@ -24,7 +24,7 @@ serviceName = "authentik"; settings = { - + imports = [ ./arion-compose.nix ]; }; }; }; diff --git a/system-config/services/containers/default.nix b/system-config/services/containers/default.nix index c7aad72..8e51741 100644 --- a/system-config/services/containers/default.nix +++ b/system-config/services/containers/default.nix @@ -3,7 +3,8 @@ imports = [ ./gitlab ./traefik - ./authentik-nix +# ./authentik-nix + ./authentik ./nginx ]; }