This commit is contained in:
soraefir
2026-05-14 16:29:30 +02:00
parent c069079a3a
commit c60123ca3c
2 changed files with 4 additions and 1 deletions

View File

@@ -86,6 +86,9 @@ in {
AUTHENTIK_HOST = "https://${containerCfg.subdomain}.${serverCfg.hostDomain}"; AUTHENTIK_HOST = "https://${containerCfg.subdomain}.${serverCfg.hostDomain}";
AUTHENTIK_INSECURE = "false"; AUTHENTIK_INSECURE = "false";
}; };
overrides = {
ports = [ "6636:636" ];
};
}; };
}; };

View File

@@ -130,7 +130,7 @@ in {
${lib.optionalString (serverCfg.containers ? authentik) '' ${lib.optionalString (serverCfg.containers ? authentik) ''
$GT admin auth delete --id 1 $GT admin auth delete --id 1
$GT admin auth add-ldap --name Authentik --host authentik-ldap --port 3389 --security-protocol unencrypted \ $GT admin auth add-ldap --name Authentik --host ${builder.host} --port 636 --security-protocol ldaps \
--bind-dn "cn=ldap-service,ou=users,${LDAP_DC_DOMAIN}" --bind-password $DEFAULT_LDAP_PASSWORD \ --bind-dn "cn=ldap-service,ou=users,${LDAP_DC_DOMAIN}" --bind-password $DEFAULT_LDAP_PASSWORD \
--user-search-base "ou=users,${LDAP_DC_DOMAIN}" --user-filter "(|(username=%s)(email=%s))" \ --user-search-base "ou=users,${LDAP_DC_DOMAIN}" --user-filter "(|(username=%s)(email=%s))" \
--username-attribute "username" --firstname-attribute "givenName" --surname-attribute "sn" --email-attribute "mail" \ --username-attribute "username" --firstname-attribute "givenName" --surname-attribute "sn" --email-attribute "mail" \