tamipes/authentik-nix
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Merge pull request #70 from nix-community/authentik-2025.8

Browse source 
update: 2025.6.4 -> 2025.8.1
This commit is contained in:
Maximilian Bosch 2025-09-05 10:49:56 +02:00 • committed by GitHub
commit cfa634fd2d
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
6 changed files with 39 additions and 32 deletions
Download patch file Download diff file Expand all files Collapse all files

12
module.nix
View file

@ -185,10 +185,14 @@ in
tz = "UTC";
# Passed to each service and to the `ak` wrapper using `systemd-run(1)`
environment.PROMETHEUS_MULTIPROC_DIR = "%S/authentik/prometheus";
serviceDefaults = {
DynamicUser = true;
User = "authentik";
EnvironmentFile = mkIf (cfg.environmentFile != null) [ cfg.environmentFile ];
ExecStartPre = [
"${pkgs.coreutils}/bin/mkdir -p \${PROMETHEUS_MULTIPROC_DIR}"
];
};
akOptions = flatten (
mapAttrsToList
@ -265,7 +269,7 @@ in
after = [ "network-online.target" ] ++ lib.optionals cfg.createDatabase [ "postgresql.service" ];
before = [ "authentik.service" ];
restartTriggers = [ config.environment.etc."authentik/config.yml".source ];
environment.TZ = tz;
environment = mkMerge [ environment { TZ = tz; } ];
serviceConfig = mkMerge [
serviceDefaults
{
@ -293,13 +297,13 @@ in
preStart = ''
ln -svf ${config.services.authentik.authentikComponents.staticWorkdirDeps}/* /run/authentik/
'';
environment.TZ = tz;
environment = mkMerge [ environment { TZ = tz; } ];
serviceConfig = mkMerge [
serviceDefaults
{
RuntimeDirectory = "authentik";
WorkingDirectory = "%t/authentik";
ExecStart = "${cfg.authentikComponents.manage}/bin/manage.py worker";
ExecStart = "${cfg.authentikComponents.manage}/bin/manage.py worker --pid-file %t/authentik/worker.pid";
Restart = "on-failure";
RestartSec = "1s";
LoadCredential = mkIf (cfg.nginx.enable && cfg.nginx.enableACME) [
@ -325,7 +329,7 @@ in
mkdir -p ${cfg.settings.storage.media.file.path}
''}
'';
environment.TZ = tz;
environment = mkMerge [ environment { TZ = tz; } ];
serviceConfig = mkMerge [
serviceDefaults
{