Fix
This commit is contained in:
@@ -1,9 +1,9 @@
|
|||||||
{ ... }: {
|
{ ... }: {
|
||||||
imports = [ ./dbus ./fonts ./hw ./locale ./network ./nix ./security ./xdg ];
|
imports = [ ./dbus ./fonts ./hw ./locale ./network ./nix ./security ./xdg ];
|
||||||
|
|
||||||
services.journald.extraConfig = ''
|
# services.journald.extraConfig = ''
|
||||||
LineMax=64K
|
# LineMax=128K
|
||||||
SystemMaxUse=256M
|
# SystemMaxUse=512M
|
||||||
SystemMaxFileSize=128M
|
# SystemMaxFileSize=128M
|
||||||
'';
|
# '';
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -86,9 +86,6 @@ in {
|
|||||||
AUTHENTIK_HOST = "https://${containerCfg.subdomain}.${serverCfg.hostDomain}";
|
AUTHENTIK_HOST = "https://${containerCfg.subdomain}.${serverCfg.hostDomain}";
|
||||||
AUTHENTIK_INSECURE = "false";
|
AUTHENTIK_INSECURE = "false";
|
||||||
};
|
};
|
||||||
overrides = {
|
|
||||||
ports = [ "636:6636" ];
|
|
||||||
};
|
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
|
|||||||
@@ -50,6 +50,8 @@ entries:
|
|||||||
state: present
|
state: present
|
||||||
identifiers:
|
identifiers:
|
||||||
name: "LDAP Search Role"
|
name: "LDAP Search Role"
|
||||||
|
permissions:
|
||||||
|
- "authentik_providers_ldap.search_full_directory"
|
||||||
|
|
||||||
- model: authentik_core.group
|
- model: authentik_core.group
|
||||||
state: present
|
state: present
|
||||||
@@ -60,13 +62,3 @@ entries:
|
|||||||
- !Find [authentik_core.user, [username, "ldap-service"]]
|
- !Find [authentik_core.user, [username, "ldap-service"]]
|
||||||
roles:
|
roles:
|
||||||
- !Find [authentik_rbac.role, [name, "LDAP Search Role"]]
|
- !Find [authentik_rbac.role, [name, "LDAP Search Role"]]
|
||||||
|
|
||||||
- model: authentik_providers_ldap.ldapprovider
|
|
||||||
state: present
|
|
||||||
identifiers:
|
|
||||||
name: ldap-provider
|
|
||||||
attrs:
|
|
||||||
object_permissions:
|
|
||||||
- role: !Find [authentik_rbac.role, [name, "LDAP Search Role"]]
|
|
||||||
permissions:
|
|
||||||
- "authentik_providers_ldap.search_full_directory"
|
|
||||||
|
|||||||
Reference in New Issue
Block a user