enable media uploads

The media upload feature is build around being deployed in a container
and only enables uploads when `/media` is a mountpoint. This isn't the
case on nixos and as such media uploads are disable.

In order to enable this, we need to patch authentik so that the
`can_save_media` capability is enabled.
This commit is contained in:
Alexander Sieg 2024-01-02 11:45:20 +01:00
parent 8ff6252370
commit 8e23ad0cef
No known key found for this signature in database
3 changed files with 24 additions and 2 deletions

View file

@ -114,6 +114,8 @@ in
host = mkDefault "";
};
cert_discovery_dir = mkIf (cfg.nginx.enable && cfg.nginx.enableACME) "env://CREDENTIALS_DIRECTORY";
paths.media = mkDefault "/var/lib/authentik/media";
media.enable_upload = mkDefault true;
};
redis.servers.authentik = {
enable = true;
@ -181,6 +183,7 @@ in
restartTriggers = [ config.environment.etc."authentik/config.yml".source ];
preStart = ''
ln -svf ${cfg.authentikComponents.staticWorkdirDeps}/* /var/lib/authentik/
mkdir -p ${cfg.settings.paths.media}
'';
serviceConfig = {
Environment = [