From 965f4d40126f829354defc3df19237496e4e9337 Mon Sep 17 00:00:00 2001 From: WilliButz Date: Sun, 28 Apr 2024 13:53:28 +0200 Subject: [PATCH] module: drop default settings for airgapped mode These settings were originally taken from https://docs.goauthentik.io/docs/installation/air-gapped but I think they should be configured by users themselves rather than being enforced by this module. Notes: * error reporting is already disabled by default * the update check setting obviously didn't do anthing as the update check was always running * "startup analytics" currently refers to a post request[1] to upstream authentik, that includes the running version and a SHA-512 digest of the unique installation id and an env string that refers to the environment in which authentik is running, that should be "custom"[2] for NixOS. [1]: https://github.com/goauthentik/authentik/blob/version/2024.4.1/lifecycle/gunicorn.conf.py#L122-L137 [2]: https://github.com/goauthentik/authentik/blob/version/2024.4.1/authentik/lib/utils/reflection.py#L52-L64 --- module.nix | 6 ------ 1 file changed, 6 deletions(-) diff --git a/module.nix b/module.nix index f42e607..112a925 100644 --- a/module.nix +++ b/module.nix @@ -261,12 +261,6 @@ in ''; environment.TZ = tz; serviceConfig = mkMerge [ serviceDefaults { - Environment = [ - "AUTHENTIK_ERROR_REPORTING__ENABLED=false" - "AUTHENTIK_DISABLE_UPDATE_CHECK=true" - "AUTHENTIK_DISABLE_STARTUP_ANALYTICS=true" - "AUTHENTIK_AVATARS=initials" - ]; StateDirectory = "authentik"; UMask = "0027"; # TODO /run might be sufficient