From c54ed4a71230cd6de93ee7fd1445cd54326c7a32 Mon Sep 17 00:00:00 2001
From: soraefir <soraefir+git@helcel>
Date: Sat, 9 May 2026 12:54:13 +0200
Subject: [PATCH] Admin user

---
 modules/server/containers/defs/etherpad.nix | 7 +++++--
 modules/server/sops/server.yaml             | 6 +++---
 2 files changed, 8 insertions(+), 5 deletions(-)

diff --git a/modules/server/containers/defs/etherpad.nix b/modules/server/containers/defs/etherpad.nix
index 77aeef5..24cba5f 100644
--- a/modules/server/containers/defs/etherpad.nix
+++ b/modules/server/containers/defs/etherpad.nix
@@ -51,13 +51,16 @@ let
     };
 
     requireSession = "\${REQUIRE_SESSION:false}";
-
     editOnly = "\${EDIT_ONLY:false}";
     minify = "\${MINIFY:true}";
-    requireAuthentication = "\${REQUIRE_AUTHENTICATION:true}";
+    requireAuthentication = "\${REQUIRE_AUTHENTICATION:false}";
     requireAuthorization = "\${REQUIRE_AUTHORIZATION:false}";
     trustProxy = "\${TRUST_PROXY:true}";
     ep_headerauth.username_header = "X-authentik-username";
+    users.admin = {
+      password = "\${ADMIN_PASSWORD:null}";
+      is_admin = true;
+    };
     socketTransportProtocols = ["websocket" "polling"];
     socketIo.maxHttpBufferSize = "\${SOCKETIO_MAX_HTTP_BUFFER_SIZE:1000000}";
     indentationOnNewLine = true;
diff --git a/modules/server/sops/server.yaml b/modules/server/sops/server.yaml
index 371c6be..c85668e 100644
--- a/modules/server/sops/server.yaml
+++ b/modules/server/sops/server.yaml
@@ -3,7 +3,7 @@ TRAEFIK: ENC[AES256_GCM,data:Ei+/OL7xwNaOEg3rSaz95N78nvp51lC63XCplNzeD+bBMGcK9G7
 AUTHENTIK: ENC[AES256_GCM,data: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,iv:Hj7aBfDLSqRBzueN8b9F9TutpjMESFloqrnirSmnH9U=,tag:1ikt1JvuhIZCx68nh/VzMA==,type:str]
 NEXTCLOUD: ENC[AES256_GCM,data:IWitzubILQ5SrGdO3UQZboisqAECt5lXOqHVg4yAKxedG7ZLOgVp6jPV+4VVDC13KEkxIsiYjjNvjqnOXCdYWQIC13YZ+o2IBDI9PgavBB3nmjfi0Q7BVki6C8qCtbM5H9uFlQ3h7rkPyEbE3pHa3dY5uwgdtmvw3qKf2UAZGIJCU7dKamjuTCucGitOEG434jFQik9duHZs7EV3AZrkLXqOfdvftvdpciDb/4/K7h/4uEYSXJ94Lf0b16/NRUcR,iv:1UvcbqC3hJEHU9t6Z+N226DTJEcgM315ynYkxPKpYSM=,tag:FGkXlUw+7LRu1/cpMys7OA==,type:str]
 COLLABORA: ENC[AES256_GCM,data:tY4LLma/7Ut9J/6C3GRyjRn30CAP76hT573++cLqGj7/BSb8uEkU0sJ/CUmSEJvxLqnoFgjc+XWe+NJSiNMWKYfnHvf1DglMntkJB+BgvnbYvHAYOHOAJO6Jp7YhrYvXdy+HoT4DNaQbcDhYuYI=,iv:uPxznygpX6gtmJ7dZ/WrbxyuMjup0wtbBPS7xYinrwI=,tag:rdqrSIokAbkRzP4FLxqYLw==,type:str]
-ETHERPAD: ENC[AES256_GCM,data:4EoakM66vZyK0A8j2eCE35rTbydF0OncoZHrzSZ+PTEQry8Pk8DTblKynUbb7bLtoAUNwigjiRa5LhWLD0E1UQSzlVLRoaJGQls729niiGNyyxXl1+6W9wRmmIYBMUg4nx2YjFI3G0j1ywNhJLhwEfITXBDI4XYv6NVkJar0h2UKmCeEJ4OEVtx4Hon475LTSOCMEqzQDP9gQMAQTbAZJEHYdKw0BG9HUyVSQvUcqAx8BmO7g2w=,iv:YjI7729jZmlrPF469wpFnuQK39yVuSXLg8FIKYXlIsQ=,tag:NtiQwH7JRZJAkzxM1gKSRg==,type:str]
+ETHERPAD: ENC[AES256_GCM,data:8fDVvn6B8WNd8JxaxFBVNQrVY/wxmiqdMLfJu2cCqJgelDOtlyE7egicrIb6XCdRYHkU/EU59OOJcU7AFuextpQDxp6rnPsLIHfh2s2Km6bANIZk3pNEQXYH8A6rIg4Ozq0w8JLtncl6KmQZ0cO4w2tqR2oH/SubadFtz72Lnh+pZl8BM/YbhL3SBocFFGsZiHWjcFRA9m9ndWOM1lvvUjz6+oEHRmuzTdabuwQwTC0ZgXbCriK1mVHPrF+VqmDRPuEYRvlB25UPVaC4zE6i,iv:mThrVc5RLEwdmFQa4P81DUx7gVlvH+W82Z7gtLx4qyE=,tag:p8RLfMFdKgekR4SKr6f8Iw==,type:str]
 sops:
     age:
         - recipient: age1sxzuhh2fcd4pmaz4mdqq95t683d32ft22w9t2r7pk258u0s8wymsqdj7lg
@@ -24,8 +24,8 @@ sops:
             S1NaTVFTL0FCdm1EQmRsUnlhclZNZlEKEgIe60qkvY8+UocjQU+WM2dTL/1y3Kqk
             d4RrlLP9NSozwVsPYI4ntygvMSApbT4v0YvoO7gV90lkGWEvW1YDfA==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-05-09T10:09:22Z"
-    mac: ENC[AES256_GCM,data:WYhLSe3xq0LctvxnJI6QafZ0VBbNxfZUmrxSitPeqy5afmmkXFNcw3muIZPbWikmTsAY8kAQXQ0nrgWugSy7yJNO/U5D1Fr3+26KR/mrtReW3uo7m3Y0ptDrO+zQViQxUpaE0KA02S4PvS4Obws42M56zqmTgx7VoM29+OQhqzk=,iv:e3Ije+G/vl0bMO9D/NpKDNH5cP4BRqwKTWxKpQXVaN0=,tag:DifQqMOpeXR20EifODoWQg==,type:str]
+    lastmodified: "2026-05-09T10:54:06Z"
+    mac: ENC[AES256_GCM,data:7isR8oE5Zmx2lwSWaabGVTpWhkNkiHueSn0iVzPiGu8gReeJVlb21n2OO2JduSHMMH1pc+LNrugpRvwlGKK1OlaGPe6nYtEki2jkgn2hwnD7Q/6kTz8GoqGzWyWUbG/Y+1KsMoQb9KgfcKcOh4JLJAyNw+mgeKeD+nhWVTJY8ww=,iv:9k/HQFhM5VKi7PUkLSqk8o5TUg9e/OCs9MdeqZYpKm0=,tag:ZQJBJ60+IYufctZYMa3Oug==,type:str]
     pgp:
         - created_at: "2026-05-05T23:46:27Z"
           enc: |-