diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml index 6ad0cf0..9d2d5b4 100644 --- a/.gitea/workflows/build.yml +++ b/.gitea/workflows/build.yml @@ -12,14 +12,14 @@ jobs: build-nixos: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - name: "Install Nix ❄️" uses: cachix/install-nix-action@v31 # - uses: DeterminateSystems/nix-installer-action@v4 - - uses: DeterminateSystems/magic-nix-cache-action@v13 - - uses: DeterminateSystems/flake-checker-action@v12 + - uses: DeterminateSystems/magic-nix-cache-action@v15 + - uses: DeterminateSystems/flake-checker-action@v13 - name: "Install Cachix ❄️" uses: cachix/cachix-action@v17 diff --git a/.gitea/workflows/update.yml b/.gitea/workflows/update.yml index 410271d..11c08eb 100644 --- a/.gitea/workflows/update.yml +++ b/.gitea/workflows/update.yml @@ -13,7 +13,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout repository - uses: actions/checkout@v6 + uses: actions/checkout@v7 - name: Install nix uses: DeterminateSystems/nix-installer-action@v22 with: diff --git a/flake.lock b/flake.lock index 65e4652..179598d 100644 --- a/flake.lock +++ b/flake.lock @@ -45,11 +45,11 @@ ] }, "locked": { - "lastModified": 1775037210, - "narHash": "sha256-KM2WYj6EA7M/FVZVCl3rqWY+TFV5QzSyyGE2gQxeODU=", + "lastModified": 1786845137, + "narHash": "sha256-oQFip+v0luP8NIxJzmiW4Wu8bILsbFWom5l0zonl8hQ=", "owner": "lnl7", "repo": "nix-darwin", - "rev": "06648f4902343228ce2de79f291dd5a58ee12146", + "rev": "4cff07de74b50e64bdd68cd4e722ab5b6b35ee48", "type": "github" }, "original": { @@ -102,12 +102,15 @@ } }, "hardware": { + "inputs": { + "nixpkgs": "nixpkgs" + }, "locked": { - "lastModified": 1776983936, - "narHash": "sha256-ZOQyNqSvJ8UdrrqU1p7vaFcdL53idK+LOM8oRWEWh6o=", + "lastModified": 1788335262, + "narHash": "sha256-3jBEq8avfzlrsY4UpW4d5TOmm7ocseZfnitEJhqauyc=", "owner": "nixos", "repo": "nixos-hardware", - "rev": "2096f3f411ce46e88a79ae4eafcfc9df8ed41c61", + "rev": "44d95795ee2d475b3d687325e26dcf4ca9104557", "type": "github" }, "original": { @@ -139,11 +142,11 @@ ] }, "locked": { - "lastModified": 1777771528, - "narHash": "sha256-YycygK6n7KeW1YCobdFJcORWzkmrvNcp6xT+IovA0d4=", + "lastModified": 1779506708, + "narHash": "sha256-QOD/CNm196nCJRheux/URi4/HE66fthdOMqCJoPP1Y0=", "owner": "nix-community", "repo": "home-manager", - "rev": "0585fbf645640973e3398863bbaf3bd1ddce4a51", + "rev": "3ee51fbdac8c8bdfe1e7e1fcaba6520a563f394f", "type": "github" }, "original": { @@ -174,11 +177,11 @@ }, "nixUnstable": { "locked": { - "lastModified": 1777641297, - "narHash": "sha256-WNGcmeOZ8Tr9dq6ztCspYbzWFswr2mPebM9LpsfGxPk=", + "lastModified": 1788549839, + "narHash": "sha256-kOrCcSIA6w9J1hX5DqHy2k9pDTJymExTsbV74U9UtCA=", "owner": "nixos", "repo": "nixpkgs", - "rev": "c6d65881c5624c9cae5ea6cedef24699b0c0a4c0", + "rev": "17de0b976395537756f30a3e78f2f06e5cec89ed", "type": "github" }, "original": { @@ -190,18 +193,15 @@ }, "nixpkgs": { "locked": { - "lastModified": 1777428379, - "narHash": "sha256-ypxFOeDz+CqADEQNL72haqGjvZQdBR5Vc7pyx2JDttI=", - "owner": "nixos", - "repo": "nixpkgs", - "rev": "755f5aa91337890c432639c60b6064bb7fe67769", - "type": "github" + "lastModified": 1767892417, + "narHash": "sha256-8bW3q88CEg2u4hSP66Vf4lpbLonHz7hqDNBMcCY7E9U=", + "rev": "3497aa5c9457a9d88d71fa93a4a8368816fbeeba", + "type": "tarball", + "url": "https://releases.nixos.org/nixos/unstable/nixos-26.05pre924538.3497aa5c9457/nixexprs.tar.xz" }, "original": { - "owner": "nixos", - "ref": "nixos-25.11", - "repo": "nixpkgs", - "type": "github" + "type": "tarball", + "url": "https://channels.nixos.org/nixos-unstable/nixexprs.tar.xz" } }, "nixpkgs-lib": { @@ -221,11 +221,27 @@ }, "nixpkgs_2": { "locked": { - "lastModified": 1777578337, - "narHash": "sha256-Ad49moKWeXtKBJNy2ebiTQUEgdLyvGmTeykAQ9xM+Z4=", + "lastModified": 1782847189, + "narHash": "sha256-twXPFqFsrrY5r28Zh7Homgcp2gUMBgQ6WDS98Q/3xFI=", "owner": "nixos", "repo": "nixpkgs", - "rev": "15f4ee454b1dce334612fa6843b3e05cf546efab", + "rev": "b6018f87da91d19d0ab4cf979885689b469cdd41", + "type": "github" + }, + "original": { + "owner": "nixos", + "ref": "nixos-25.11", + "repo": "nixpkgs", + "type": "github" + } + }, + "nixpkgs_3": { + "locked": { + "lastModified": 1788614874, + "narHash": "sha256-7QYjT2vHLuX9Z1pdxHXDKCbh1CR3D/2rywB9Tx0MPRg=", + "owner": "nixos", + "repo": "nixpkgs", + "rev": "c043004d1c6985732bcc1cbc5a9c9aecbbb4e0f0", "type": "github" }, "original": { @@ -238,14 +254,14 @@ "nur": { "inputs": { "flake-parts": "flake-parts_2", - "nixpkgs": "nixpkgs_2" + "nixpkgs": "nixpkgs_3" }, "locked": { - "lastModified": 1777763626, - "narHash": "sha256-UFwZDbdMezNnxZwikhDR4EWiCPUiEmPXHmqLOrcG34g=", + "lastModified": 1788659397, + "narHash": "sha256-Xd/wUmqlqS47w0t/ljKub0MOmiAAVpx0igi1n0hmKkM=", "owner": "nix-community", "repo": "nur", - "rev": "3873764e5896bd6da6cf0df17172849ea51ac5eb", + "rev": "1e14af32138775431c1656ca01dbc2a8d9c6c9e7", "type": "github" }, "original": { @@ -262,7 +278,7 @@ "home-manager": "home-manager", "nix-colors": "nix-colors", "nixUnstable": "nixUnstable", - "nixpkgs": "nixpkgs", + "nixpkgs": "nixpkgs_2", "nur": "nur", "sops-nix": "sops-nix" } @@ -274,11 +290,11 @@ ] }, "locked": { - "lastModified": 1777338324, - "narHash": "sha256-bc+ZZCmOTNq86/svGnw0tVpH7vJaLYvGLLKFYP08Q8E=", + "lastModified": 1788337237, + "narHash": "sha256-gkSH8VUtCo6hnysNmb9DbTuDepH2t5pv+QWjP75xKAk=", "owner": "Mic92", "repo": "sops-nix", - "rev": "8eaee5c45428b28b8c47a83e4c09dccec5f279b5", + "rev": "fbf759290e0cb0a98dfc813a4eb7d53ad1dacb57", "type": "github" }, "original": { diff --git a/modules/server/containers/default.nix b/modules/server/containers/default.nix index 04f3e92..b503ccb 100644 --- a/modules/server/containers/default.nix +++ b/modules/server/containers/default.nix @@ -3,10 +3,13 @@ let cfg = config.syscfg.server.containers; enabledConfigs = lib.filterAttrs (name: c: c.enable) cfg; containerSetsList = lib.mapAttrsToList (name: containerCfg: - import (./defs + "/${name}.nix") { - inherit config pkgs lib containerCfg; - } - ) enabledConfigs; + let defs = import (./defs + "/${name}.nix") {inherit config pkgs lib containerCfg;}; + in{ + containers = lib.mapAttrs' (cName: cValue: + lib.nameValuePair "${name}-${cName}" cValue + ) defs.containers; + } +) enabledConfigs; mergedContainers = lib.attrsets.mergeAttrsList (lib.map(e: e.containers) containerSetsList); allPathConfigs = lib.flatten (lib.map (e: e.paths or []) containerSetsList); in diff --git a/modules/server/containers/defs/authentik.nix b/modules/server/containers/defs/authentik.nix index ae02489..ee115cb 100644 --- a/modules/server/containers/defs/authentik.nix +++ b/modules/server/containers/defs/authentik.nix @@ -14,9 +14,8 @@ in { containers = { - auth_server = { + server = { image = "ghcr.io/goauthentik/server:latest"; - hostname = "auth_server"; volumes = [ "${serverCfg.dataPath}/authentik/media:/media" "${serverCfg.dataPath}/authentik/templates:/templates" @@ -47,8 +46,6 @@ in { cmd = [ "server" ]; extraOptions = [ "--add-host=host.containers.internal:host-gateway" - "--replace" - "--rm" "--ip=${containerCfg.ip}" ]; ports = [ @@ -56,9 +53,8 @@ in { ]; }; - auth_worker = { + worker = { image = "ghcr.io/goauthentik/server:latest"; - hostname = "auth_worker"; volumes = [ "${serverCfg.dataPath}/authentik/media:/media" "${serverCfg.dataPath}/authentik/templates:/templates" @@ -75,8 +71,6 @@ in { }; extraOptions = [ "--add-host=host.containers.internal:host-gateway" - "--replace" - "--rm" ]; cmd = [ "worker" ]; };