tamipes/authentik-nix
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

module: use postgres peer auth instead of password auth

Browse source
This commit is contained in:
WilliButz 2023-06-07 14:05:05 +02:00
parent b51c438d24
commit 3c661c5095
No known key found for this signature in database
GPG key ID: FB0513677AB15BEA
2 changed files with 20 additions and 23 deletions
Download patch file Download diff file Expand all files Collapse all files

19
test.nix
View file

@ -4,10 +4,7 @@
}:
let
# use a root-owned EnvironmentFile in production instead (systemd.services.<name>.serviceConfig.EnvironmentFile)
secrets = {
authentiksecret = "thissecretwillbeinthenixstore";
postgresql = "dontusethisinproduction";
};
authentiksecret = "thissecretwillbeinthenixstore";
in
pkgs.nixosTest {
name = "authentik";
@ -26,22 +23,14 @@ pkgs.nixosTest {
services.authentik.enable = true;
services.postgresql.initialScript = pkgs.writeText "psql-init.sql" ''
CREATE DATABASE authentik;
CREATE USER authentik WITH PASSWORD '${secrets.postgresql}';
GRANT ALL PRIVILEGES ON DATABASE authentik TO authentik
'';
systemd.services.authentik-migrate.serviceConfig.Environment = [
"AUTHENTIK_POSTGRESQL__PASSWORD=${secrets.postgresql}"
"AUTHENTIK_SECRET_KEY=${secrets.authentiksecret}"
"AUTHENTIK_SECRET_KEY=${authentiksecret}"
];
systemd.services.authentik-worker.serviceConfig.Environment = [
"AUTHENTIK_POSTGRESQL__PASSWORD=${secrets.postgresql}"
"AUTHENTIK_SECRET_KEY=${secrets.authentiksecret}"
"AUTHENTIK_SECRET_KEY=${authentiksecret}"
];
systemd.services.authentik.serviceConfig.Environment = [
"AUTHENTIK_POSTGRESQL__PASSWORD=${secrets.postgresql}"
"AUTHENTIK_SECRET_KEY=${secrets.authentiksecret}"
"AUTHENTIK_SECRET_KEY=${authentiksecret}"
];
services.xserver.enable = true;