Compare commits
1 Commits
3207a692fd
...
d02931c64e
Author | SHA1 | Date | |
---|---|---|---|
|
d02931c64e |
32
flake.lock
generated
32
flake.lock
generated
@ -59,11 +59,11 @@
|
||||
]
|
||||
},
|
||||
"locked": {
|
||||
"lastModified": 1701433070,
|
||||
"narHash": "sha256-Gf9JStfENaUQ7YWFz3V7x/srIwr4nlnVteqaAxtwpgM=",
|
||||
"lastModified": 1701071203,
|
||||
"narHash": "sha256-lQywA7QU/vzTdZ1apI0PfgCWNyQobXUYghVrR5zuIeM=",
|
||||
"owner": "nix-community",
|
||||
"repo": "home-manager",
|
||||
"rev": "4a8545f5e737a6338814a4676dc8e18c7f43fc57",
|
||||
"rev": "db1878f013b52ba5e4034db7c1b63e8d04173a86",
|
||||
"type": "github"
|
||||
},
|
||||
"original": {
|
||||
@ -83,11 +83,11 @@
|
||||
"xdph": "xdph"
|
||||
},
|
||||
"locked": {
|
||||
"lastModified": 1701393128,
|
||||
"narHash": "sha256-SYTztE8kHHpUVmVdHlQQVi2qhDi5oPQiXQ+K4/bc1nA=",
|
||||
"lastModified": 1701264997,
|
||||
"narHash": "sha256-0Q9gNAxk//uaXJd5llBP+1TbgP7FgCZBVdX0rYd3MvM=",
|
||||
"owner": "hyprwm",
|
||||
"repo": "Hyprland",
|
||||
"rev": "8440a30231ea41a6b1dacc60a28837b265a6efec",
|
||||
"rev": "b80c72c7ddbf79147d64759c8659eb5939d0327e",
|
||||
"type": "github"
|
||||
},
|
||||
"original": {
|
||||
@ -142,11 +142,11 @@
|
||||
},
|
||||
"nixpkgs": {
|
||||
"locked": {
|
||||
"lastModified": 1701253981,
|
||||
"narHash": "sha256-ztaDIyZ7HrTAfEEUt9AtTDNoCYxUdSd6NrRHaYOIxtk=",
|
||||
"lastModified": 1701068326,
|
||||
"narHash": "sha256-vmMceA+q6hG1yrjb+MP8T0YFDQIrW3bl45e7z24IEts=",
|
||||
"owner": "nixos",
|
||||
"repo": "nixpkgs",
|
||||
"rev": "e92039b55bcd58469325ded85d4f58dd5a4eaf58",
|
||||
"rev": "8cfef6986adfb599ba379ae53c9f5631ecd2fd9c",
|
||||
"type": "github"
|
||||
},
|
||||
"original": {
|
||||
@ -173,11 +173,11 @@
|
||||
},
|
||||
"nur": {
|
||||
"locked": {
|
||||
"lastModified": 1701437187,
|
||||
"narHash": "sha256-oL2aDfzdUv2dKH01OIapTMmzayyQzgfrOYlEoh139Nk=",
|
||||
"lastModified": 1701297900,
|
||||
"narHash": "sha256-P2iNMqLm8lgcfsuLQEAPmbZeYomWfckTNA2TEDLlER8=",
|
||||
"owner": "nix-community",
|
||||
"repo": "nur",
|
||||
"rev": "da2d107831df50c8935dfb08999adf06834bea19",
|
||||
"rev": "64dba129a417f506338de690a3e8b8829e7d8df6",
|
||||
"type": "github"
|
||||
},
|
||||
"original": {
|
||||
@ -240,18 +240,18 @@
|
||||
"flake": false,
|
||||
"locked": {
|
||||
"host": "gitlab.freedesktop.org",
|
||||
"lastModified": 1701368958,
|
||||
"narHash": "sha256-7kvyoA91etzVEl9mkA/EJfB6z/PltxX7Xc4gcr7/xlo=",
|
||||
"lastModified": 1700734054,
|
||||
"narHash": "sha256-SBu1y01WjCSrcCKvgfCDDckrZjU/OmCJT8Xc+hPow7E=",
|
||||
"owner": "wlroots",
|
||||
"repo": "wlroots",
|
||||
"rev": "5d639394f3e83b01596dcd166a44a9a1a2583350",
|
||||
"rev": "2eb225236eb72f27beec921e9f37ddf58e874fba",
|
||||
"type": "gitlab"
|
||||
},
|
||||
"original": {
|
||||
"host": "gitlab.freedesktop.org",
|
||||
"owner": "wlroots",
|
||||
"repo": "wlroots",
|
||||
"rev": "5d639394f3e83b01596dcd166a44a9a1a2583350",
|
||||
"rev": "2eb225236eb72f27beec921e9f37ddf58e874fba",
|
||||
"type": "gitlab"
|
||||
}
|
||||
},
|
||||
|
@ -26,8 +26,8 @@
|
||||
padding = "12";
|
||||
horizontal_padding = "15";
|
||||
text_icon_padding = "0";
|
||||
frame_width = "${config.colorScheme.colors.border-width}";
|
||||
frame_color = "#${config.colorScheme.colors.base04}";
|
||||
frame_width = "2";
|
||||
frame_color = "#${config.colorScheme.colors.base03}";
|
||||
separator_color = "auto";
|
||||
sort = "yes";
|
||||
font = "IBM Plex Mono 14";
|
||||
@ -69,23 +69,23 @@
|
||||
|
||||
};
|
||||
urgency_low = {
|
||||
background = "#${config.colorScheme.colors.base01}";
|
||||
background = "#${config.colorScheme.colors.base00}";
|
||||
foreground = "#${config.colorScheme.colors.base07}";
|
||||
frame_color = "#${config.colorScheme.colors.base03}";
|
||||
timeout = "3";
|
||||
highlight = "#${config.colorScheme.colors.base0B}";
|
||||
};
|
||||
urgency_normal = {
|
||||
background = "#${config.colorScheme.colors.base01}";
|
||||
background = "#${config.colorScheme.colors.base00}";
|
||||
foreground = "#${config.colorScheme.colors.base07}";
|
||||
frame_color = "#${config.colorScheme.colors.base04}";
|
||||
frame_color = "#${config.colorScheme.colors.base03}";
|
||||
timeout = "5";
|
||||
highlight = "#${config.colorScheme.colors.base0C}";
|
||||
};
|
||||
urgency_critical = {
|
||||
background = "#${config.colorScheme.colors.base01}";
|
||||
background = "#${config.colorScheme.colors.base00}";
|
||||
foreground = "#${config.colorScheme.colors.base0F}";
|
||||
frame_color = "#${config.colorScheme.colors.base0F}";
|
||||
frame_color = "#${config.colorScheme.colors.base03}";
|
||||
timeout = "10";
|
||||
highlight = "#${config.colorScheme.colors.base0E}";
|
||||
};
|
||||
|
@ -1,4 +1,6 @@
|
||||
{ config, pkgs, ... }: {
|
||||
{ config, pkgs, ... }:
|
||||
|
||||
{
|
||||
imports = [ ];
|
||||
|
||||
users.users.sora = {
|
||||
|
@ -1,4 +1,6 @@
|
||||
{ ... }: {
|
||||
imports = [ ./display.nix ];
|
||||
|
||||
config.homecfg = {
|
||||
username = "sora";
|
||||
make = {
|
||||
|
@ -1,4 +0,0 @@
|
||||
{ ... }:
|
||||
{
|
||||
|
||||
}
|
@ -1,106 +0,0 @@
|
||||
{ pkgs, ... }:
|
||||
let
|
||||
HOST_DOMAIN = "helcel.net";
|
||||
MAIL_HOST_DOMAIN = "norereply.${HOST_DOMAIN}";
|
||||
MAIL_SERVER_DOMAIN = "mail.infomaniak.com";
|
||||
in {
|
||||
project.name = "Authentik";
|
||||
|
||||
networks = {
|
||||
internal = {
|
||||
internal = true;
|
||||
external = false;
|
||||
};
|
||||
external = { external = true; };
|
||||
};
|
||||
|
||||
services = {
|
||||
|
||||
auth_postgresql.service = {
|
||||
image = "postgres:14-alpine";
|
||||
container_name = "auth_postgresql";
|
||||
restart = "unless-stopped";
|
||||
networks = [ "internal" ];
|
||||
volumes = [ ];
|
||||
environment = {
|
||||
POSTGRES_PASSWORD = "/run/secrets/AUTHENTIK_POSTGRESQL__PASSWORD";
|
||||
POSTGRES_USER = "authentik";
|
||||
POSTGRES_DB = "authentik";
|
||||
};
|
||||
};
|
||||
|
||||
auth_redis.service = {
|
||||
image = "redis:alpine";
|
||||
container_name = "auth_redis";
|
||||
restart = "unless-stopped";
|
||||
networks = [ "internal" ];
|
||||
volumes = [ ];
|
||||
environment = { };
|
||||
labels = { "traefik.enable" = "false"; };
|
||||
};
|
||||
|
||||
auth_server.service = {
|
||||
image = "ghcr.io/goauthentik/server:latest";
|
||||
container_name = "auth_server";
|
||||
restart = "unless-stopped";
|
||||
networks = [ "internal" "external" ];
|
||||
volumes = [
|
||||
"/media/data/authentik/media:/media"
|
||||
"/media/data/authentik/templates:/templates"
|
||||
];
|
||||
environment = {
|
||||
"AUTHENTIK_REDIS__HOST" = "auth_redis";
|
||||
"AUTHENTIK_POSTGRESQL__HOST" = "auth_postgresql";
|
||||
"AUTHENTIK_POSTGRESQL__USER" = "authentik";
|
||||
"AUTHENTIK_POSTGRESQL__NAME" = "authentik";
|
||||
"AUTHENTIK_POSTGRESQL__PASSWORD" =
|
||||
"/run/secrets/AUTHENTIK_POSTGRESQL__PASSWORD";
|
||||
"AUTHENTIK_SECRET_KEY" = "/run/secrets/AUTHENTIK_SECRET_KEY";
|
||||
"AUTHENTIK_EMAIL__HOST" = "${MAIL_SERVER_DOMAIN}";
|
||||
"AUTHENTIK_EMAIL__PORT" = "587";
|
||||
"AUTHENTIK_EMAIL__USERNAME" = "noreply@${MAIL_HOST_DOMAIN}";
|
||||
"AUTHENTIK_EMAIL__PASSWORD" = "/run/secrets/AUTHENTIK_EMAIL__PASSWORD";
|
||||
"AUTHENTIK_EMAIL__USE_TLS" = "true";
|
||||
"AUTHENTIK_EMAIL__USE_SSL" = "false";
|
||||
"AUTHENTIK_EMAIL__TIMEOUT" = "10";
|
||||
"AUTHENTIK_EMAIL__FROM" = "sso@noreply.${MAIL_HOST_DOMAIN}";
|
||||
};
|
||||
labels = {
|
||||
"traefik.enable" = "true";
|
||||
"traefik.http.routers.sso.entrypoints" = "web-secure";
|
||||
"traefik.http.routers.sso.rule" = "Host(`sso.${HOST_DOMAIN}`)";
|
||||
"traefik.http.routers.sso.tls" = "true";
|
||||
"traefik.http.services.sso.loadbalancer.server.port" = "9000";
|
||||
"traefik.docker.network" = "external";
|
||||
};
|
||||
command = "server";
|
||||
service.ports = [
|
||||
"9999:9000" # host:container
|
||||
];
|
||||
};
|
||||
|
||||
auth_worker.service = {
|
||||
image = "ghcr.io/goauthentik/server:latest";
|
||||
container_name = "auth_worker";
|
||||
restart = "unless-stopped";
|
||||
networks = [ "internal" ];
|
||||
volumes = [
|
||||
"/media/data/authentik/media:/media"
|
||||
"/media/data/authentik/templates:/templates"
|
||||
"/var/run/docker.sock:/var/run/docker.sock"
|
||||
];
|
||||
environment = {
|
||||
"AUTHENTIK_REDIS__HOST" = "auth_redis";
|
||||
"AUTHENTIK_POSTGRESQL__HOST" = "auth_postgresql";
|
||||
"AUTHENTIK_POSTGRESQL__USER" = "authentik";
|
||||
"AUTHENTIK_POSTGRESQL__NAME" = "authentik";
|
||||
"AUTHENTIK_POSTGRESQL__PASSWORD" =
|
||||
"/run/secrets/AUTHENTIK_POSTGRESQL__PASSWORD";
|
||||
"AUTHENTIK_SECRET_KEY" = "/run/secrets/AUTHENTIK_SECRET_KEY";
|
||||
};
|
||||
labels = { "traefik.enable" = "false"; };
|
||||
command = "worker";
|
||||
user = "root";
|
||||
};
|
||||
};
|
||||
}
|
Loading…
x
Reference in New Issue
Block a user