tamipes/authentik-nix
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

module: drop default settings for airgapped mode

Browse source 
These settings were originally taken from
https://docs.goauthentik.io/docs/installation/air-gapped
but I think they should be configured by users themselves rather than
being enforced by this module.

Notes:
* error reporting is already disabled by default
* the update check setting obviously didn't do anthing as the update
  check was always running
* "startup analytics" currently refers to a post request[1] to upstream authentik,
  that includes the running version and a SHA-512 digest of the unique
  installation id and an env string that refers to the environment in which
  authentik is running, that should be "custom"[2] for NixOS.

[1]: https://github.com/goauthentik/authentik/blob/version/2024.4.1/lifecycle/gunicorn.conf.py#L122-L137
[2]: https://github.com/goauthentik/authentik/blob/version/2024.4.1/authentik/lib/utils/reflection.py#L52-L64
This commit is contained in:
WilliButz 2024-04-28 13:53:28 +02:00
parent 876db63217
commit 965f4d4012
No known key found for this signature in database
GPG key ID: AB05DF703EB9DC70
1 changed files with 0 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

6
module.nix
View file

@ -261,12 +261,6 @@ in
''; '';
environment.TZ = tz; environment.TZ = tz;
serviceConfig = mkMerge [ serviceDefaults { serviceConfig = mkMerge [ serviceDefaults {
Environment = [
"AUTHENTIK_ERROR_REPORTING__ENABLED=false"
"AUTHENTIK_DISABLE_UPDATE_CHECK=true"
"AUTHENTIK_DISABLE_STARTUP_ANALYTICS=true"
"AUTHENTIK_AVATARS=initials"
];
StateDirectory = "authentik"; StateDirectory = "authentik";
UMask = "0027"; UMask = "0027";
# TODO /run might be sufficient # TODO /run might be sufficient