diff --git a/modules/server/containers/defs/authentik.nix b/modules/server/containers/defs/authentik.nix index 99387b1..0b1557e 100644 --- a/modules/server/containers/defs/authentik.nix +++ b/modules/server/containers/defs/authentik.nix @@ -56,13 +56,13 @@ in { "AUTHENTIK_DISABLE_UPDATE_CHECK" = "true"; "AUTHENTIK_POSTGRESQL__SSLMODE" = "disable"; }; - extraOptions = [ "--user=:994" ]; #PODMAN GROUP FOR SOCKET ACCESS + # extraOptions = [ "--user=:994" ]; #PODMAN GROUP FOR SOCKET ACCESS overrides = { cmd = [ "worker" ]; volumes = [ "${serverCfg.dataPath}/authentik/media:/media" "${serverCfg.dataPath}/authentik/templates:/templates" - "/var/run/podman/podman.sock:/var/run/docker.sock" #PODMAN GROUP FOR SOCKET ACCESS + # "/var/run/podman/podman.sock:/var/run/docker.sock" #PODMAN GROUP FOR SOCKET ACCESS ]; }; }; diff --git a/modules/server/sops/server.yaml b/modules/server/sops/server.yaml index 0133fc8..c99b071 100644 --- a/modules/server/sops/server.yaml +++ b/modules/server/sops/server.yaml @@ -1,5 +1,5 @@ INFOMANIAK_API_KEY: ENC[AES256_GCM,data:LFAT94Wr/rggjpIkFa2RINJTSRIcrFAfgtZzI75hyGUK/sHuIgNtsvBJnztwKcUG99mC9hRjj8NoRtBHDM9JU+VNWi1rJVCq3jQg5kuU1Dk/js5lJRpqBJOfeigxfxkU+JiDcujNK7Q/,iv:DEvTTcdEvbmHsSx+qX+QDm1ISR5y7L4fKKLXjUFCopE=,tag:46uXjEHmnzH1P9Kb5z8j8g==,type:str] -AUTHENTIK: ENC[AES256_GCM,data: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,iv:8bA18h2U4Li5UUmgY1AtfRW1PVPhGeVVuyUgT7/HoMA=,tag:C7ysQwlOk+C69ZHTAWxChg==,type:str] +AUTHENTIK: ENC[AES256_GCM,data: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,iv:u7o7aC7NHyl0myD24ibBZWcw10xYm9+KDo/scvBU42E=,tag:hgMT4f8MRBu8DNLcZxcbgQ==,type:str] sops: age: - recipient: age1sxzuhh2fcd4pmaz4mdqq95t683d32ft22w9t2r7pk258u0s8wymsqdj7lg @@ -20,8 +20,8 @@ sops: S1NaTVFTL0FCdm1EQmRsUnlhclZNZlEKEgIe60qkvY8+UocjQU+WM2dTL/1y3Kqk d4RrlLP9NSozwVsPYI4ntygvMSApbT4v0YvoO7gV90lkGWEvW1YDfA== -----END AGE ENCRYPTED FILE----- - lastmodified: "2026-05-07T22:41:31Z" - mac: ENC[AES256_GCM,data:ZGDGyhdT77VgjsH8EZPBLuvjoe57VZpqhYE4cIGP7y7Uoe/8pr8uPqdPQGT0QcR/uYiu/XDYQ6OVuAG5+mMpAP3nUA03ydXm6Fyy0VoZF7nngXnw8CjyORPTQhLdCEJeMUcWJgeUk0dgZKezMlBVJW49TaWaLIUvw9q9Ob4b5Ug=,iv:t45Afw98F9vAqD9UQGTcclrk3eVdsL37r25wdKM9rjs=,tag:MV+p8M/4u1QilGV7150Ayg==,type:str] + lastmodified: "2026-05-07T22:52:49Z" + mac: ENC[AES256_GCM,data:YaEpzzXayNZe2S0JrIegQ1cGH+36XKu586LmVwCqray1wy4c4Af+/3RU7zb6YegeNRZ8eX0/og1gagv6fNOn2dmr9abwVg//tS+68Rt/tLnnsN155xMhqOAOSrk82pVAWkg96H2zvl3rSHkmS1Jl6F5BrkOeLwAFN98qLdUqcPU=,iv:0BHRZenR/8c9uEk8HWjw4G6Hq60ewipWJd0yuU+NjbI=,tag:dTKuNGiXh7OYWNzWTMk36A==,type:str] pgp: - created_at: "2026-05-05T23:46:27Z" enc: |-