tamipes/authentik-nix
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Merge pull request #78 from Ma27/authentik-2025.10

Browse source 
update: 2025.8.4 -> 2025.10.0
This commit is contained in:
Maximilian Bosch 2025-11-04 11:44:08 +01:00 • committed by GitHub
commit bbd5f56c4b
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
7 changed files with 12 additions and 19 deletions
Download patch file Download diff file Expand all files Collapse all files

2
README.md
View file

@ -16,7 +16,7 @@ Please note that this project is not directly affiliated with the official [auth
* [flake.nix](./flake.nix) * [flake.nix](./flake.nix)
This flake provides packages (server, worker, outposts, ...) as outputs, a NixOS module and a simple VM integration test for the module. This flake provides packages (server, worker, outposts, ...) as outputs, a NixOS module and a simple VM integration test for the module.
* [module.nix](./module.nix) * [module.nix](./module.nix)
The NixOS module configures authentik services, redis and (by default) a local postgres instance. The upstream default authentik configuration can be partially overridden by setting desired parameters under `services.authentik.settings`. The NixOS module configures authentik services and (by default) a local postgres instance. The upstream default authentik configuration can be partially overridden by setting desired parameters under `services.authentik.settings`.
* [poetry2nix-python-overrides.nix](./poetry2nix-python-overrides.nix) * [poetry2nix-python-overrides.nix](./poetry2nix-python-overrides.nix)
contains overrides and fixes for building the python env contains overrides and fixes for building the python env
* [minimal-vmtest.nix](./tests/minimal-vmtest.nix) * [minimal-vmtest.nix](./tests/minimal-vmtest.nix)

2
components/gopkgs.nix
View file

@ -61,7 +61,7 @@ buildGo124Module {
] ++ lib.optionals guacamoleAvailable [ ] ++ lib.optionals guacamoleAvailable [
"cmd/rac" "cmd/rac"
]; ];
vendorHash = "sha256-wTTEDBRYCW1UFaeX49ufLT0c17sacJzcCaW/8cPNYR4="; vendorHash = "sha256-m2shrCwoVdbtr8B83ZcAyG+J6dEys2xdjtlfFFF4CDo=";
nativeBuildInputs = [ makeWrapper ]; nativeBuildInputs = [ makeWrapper ];
doCheck = false; doCheck = false;
postInstall = '' postInstall = ''

8
flake.lock generated
View file

@ -3,16 +3,16 @@
"authentik-src": { "authentik-src": {
"flake": false, "flake": false,
"locked": { "locked": {
"lastModified": 1759190535, "lastModified": 1762188128,
"narHash": "sha256-pIzDaoDWc58cY/XhsyweCwc4dfRvkaT/zqsV1gDSnCI=", "narHash": "sha256-HowB6DTGCqz770fKYbnE+rQ11XRV0WSNkLD+HSWZwz8=",
"owner": "goauthentik", "owner": "goauthentik",
"repo": "authentik", "repo": "authentik",
"rev": "8d3a289d12c7de2f244c76493af7880f70d08af2", "rev": "70406664dca2a13aabb695094f85471585668cb1",
"type": "github" "type": "github"
}, },
"original": { "original": {
"owner": "goauthentik", "owner": "goauthentik",
"ref": "version/2025.8.4", "ref": "version/2025.10.1",
"repo": "authentik", "repo": "authentik",
"type": "github" "type": "github"
} }

12
flake.nix
View file

@ -42,7 +42,7 @@
}; };
authentik-src = { authentik-src = {
# change version string in outputs as well when updating # change version string in outputs as well when updating
url = "github:goauthentik/authentik/version/2025.8.4"; url = "github:goauthentik/authentik/version/2025.10.1";
flake = false; flake = false;
}; };
}; };
@ -67,7 +67,7 @@
... ...
}: }:
let let
authentik-version = "2025.8.4"; # to pass to the drvs of some components authentik-version = "2025.10.1"; # to pass to the drvs of some components
in in
{ {
systems = import inputs.systems; systems = import inputs.systems;
@ -162,17 +162,17 @@
manage manage
; ;
terraform-provider-authentik = inputs.nixpkgs.legacyPackages.${system}.buildGo124Module rec { terraform-provider-authentik = inputs.nixpkgs.legacyPackages.${system}.buildGoModule rec {
pname = "terraform-provider-authentik"; pname = "terraform-provider-authentik";
version = "2025.8.0"; version = "2025.10.0";
src = pkgs.fetchFromGitHub { src = pkgs.fetchFromGitHub {
owner = "goauthentik"; owner = "goauthentik";
repo = pname; repo = pname;
rev = "v${version}"; rev = "v${version}";
sha256 = "sha256-mDPFuLTr8JKSlJ+I/yAfTkEf5Sd841EUkLNFZr9xHoM="; sha256 = "sha256-w5XBAeUKGui4pnDikIWuN/dWLDqKXVsQ5glZX1o1934=";
}; };
doCheck = false; # tests are run against authentik -> vm test doCheck = false; # tests are run against authentik -> vm test
vendorHash = "sha256-eyI+UEufRTNBzbMIxPehIMd7SgDkb6PZlUhj+4lPEac="; vendorHash = "sha256-jy+SBlbXnr+k03fJM8eA0DLN8LFqGIBrYIq9fPmqSaw=";
postInstall = '' postInstall = ''
path="$out/libexec/terraform-providers/registry.terraform.io/goauthentik/authentik/${version}/''${GOOS}_''${GOARCH}/" path="$out/libexec/terraform-providers/registry.terraform.io/goauthentik/authentik/${version}/''${GOOS}_''${GOARCH}/"
mkdir -p "$path" mkdir -p "$path"

5
module.nix
View file

@ -318,10 +318,6 @@ in
}; };
media.enable_upload = mkDefault true; media.enable_upload = mkDefault true;
}; };
redis.servers.authentik = {
enable = true;
port = 6379;
};
postgresql = mkIf cfg.createDatabase { postgresql = mkIf cfg.createDatabase {
enable = true; enable = true;
ensureDatabases = [ "authentik" ]; ensureDatabases = [ "authentik" ];
@ -417,7 +413,6 @@ in
]; ];
after = [ after = [
"network-online.target" "network-online.target"
"redis-authentik.service"
] ]
++ (lib.optionals cfg.createDatabase [ "postgresql.service" ]); ++ (lib.optionals cfg.createDatabase [ "postgresql.service" ]);
restartTriggers = [ config.environment.etc."authentik/config.yml".source ]; restartTriggers = [ config.environment.etc."authentik/config.yml".source ];

1
tests/minimal-vmtest.nix
View file

@ -51,7 +51,6 @@ pkgs.nixosTest {
start_all() start_all()
authentik.wait_for_unit("postgresql.service") authentik.wait_for_unit("postgresql.service")
authentik.wait_for_unit("redis-authentik.service")
authentik.wait_for_unit("authentik-migrate.service") authentik.wait_for_unit("authentik-migrate.service")
authentik.wait_for_unit("authentik-worker.service") authentik.wait_for_unit("authentik-worker.service")
authentik.wait_for_unit("authentik.service") authentik.wait_for_unit("authentik.service")

1
tests/override-scope.nix
View file

@ -92,7 +92,6 @@ pkgs.nixosTest {
start_all() start_all()
authentik.wait_for_unit("postgresql.service") authentik.wait_for_unit("postgresql.service")
authentik.wait_for_unit("redis-authentik.service")
authentik.wait_for_unit("authentik-migrate.service") authentik.wait_for_unit("authentik-migrate.service")
authentik.wait_for_unit("authentik-worker.service") authentik.wait_for_unit("authentik-worker.service")
authentik.wait_for_unit("authentik.service") authentik.wait_for_unit("authentik.service")