module: refactor as preparation for ldap-outpost

module.nix

@@ -4,29 +4,23 @@
 , ...
 }:
 let
-  cfg = config.services.authentik;
-
   inherit (lib)
     types;
 
   inherit (lib.modules)
     mkDefault
-    mkIf;
+    mkIf
+    mkMerge;
 
   inherit (lib.options)
     mkEnableOption
     mkOption;
 
-  inherit (cfg.authentikComponents)
-    migrate
-    gopkgs
-    celery
-    staticWorkdirDeps;
-
   settingsFormat = pkgs.formats.yaml {};
 in
 {
-  options.services.authentik = {
+  options.services = {
+    authentik = {
       enable = mkEnableOption "authentik";
 
       authentikComponents = {
@@ -51,8 +45,14 @@ in
         default = true;
       };
     };
+  };
 
-  config = mkIf cfg.enable {
+  config = mkMerge [
+    # authentik server
+    (mkIf config.services.authentik.enable (let
+      cfg = config.services.authentik;
+    in
+    {
       services = {
         authentik.settings = {
           blueprints_dir = mkDefault "${cfg.authentikComponents.staticWorkdirDeps}/blueprints";
@@ -137,5 +137,6 @@ in
           };
         };
       };
-  };
+    }))
+  ];
 }