Commit graph

148 commits

Author SHA1 Message Date
WilliButz
5db6f7711a
flake.lock: update nixpkgs + include fix for xmlsec build with gcc14
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/807e9154dcb16384b1b765ebe9cd2bba2ac287fd' (2024-10-29)
  → 'github:NixOS/nixpkgs/6df24922a1400241dae323af55f30e4318a6ca65' (2025-01-02)

Co-authored-by: tuedel <tuedel@tdl.gr>
2025-01-04 16:51:56 +01:00
WilliButz
6da4c7da80
update: 2024.10.5 -> 2024.12.1
See https://docs.goauthentik.io/docs/releases/2024.12

guess we're doing rust now

Flake lock file updates:

• Updated input 'authentik-src':
    'github:goauthentik/authentik/0edd7531a152910e6bdd4f7d3d0cde3ed5fdd956' (2024-12-10)
  → 'github:goauthentik/authentik/e87a17fd8169d3fa92bcc47eb2743928df83bc95' (2024-12-23)
• Updated input 'poetry2nix':
    'github:nix-community/poetry2nix/43a898b4d76f7f3f70df77a2cc2d40096bc9d75e' (2024-10-30)
  → 'github:nix-community/poetry2nix/1fb01e90771f762655be7e0e805516cd7fa4d58e' (2024-12-25)

Co-authored-by: Franz Pletz <fpletz@fnordicwalking.de>
2025-01-04 16:20:11 +01:00
WilliButz
b059e1d6e7
update: 2024.10.4 -> 2024.10.5
See https://docs.goauthentik.io/docs/releases/2024.10#fixed-in-2024105

Flake lock file updates:

• Updated input 'authentik-src':
    'github:goauthentik/authentik/527e584699abc93712114b05f70f59c5187caa66' (2024-11-21)
  → 'github:goauthentik/authentik/0edd7531a152910e6bdd4f7d3d0cde3ed5fdd956' (2024-12-10)
2024-12-10 18:25:14 +01:00
WilliButz
9d9c0a3a94
update: 2024.10.3 -> 2024.10.4
See https://docs.goauthentik.io/docs/releases/2024.10#fixed-in-2024104

Flake lock file updates:

• Updated input 'authentik-src':
    'github:goauthentik/authentik/a9776a83d38850da3b2212efa9485a73b46e512f' (2024-11-21)
  → 'github:goauthentik/authentik/527e584699abc93712114b05f70f59c5187caa66' (2024-11-21)
2024-11-21 19:57:31 +01:00
WilliButz
12b724b46a
update: 2024.10.2 -> 2024.10.3 (security update)
Fixes CVE-2024-52287, CVE-2024-52289 and CVE-2024-52307

See https://docs.goauthentik.io/docs/releases/2024.10#fixed-in-2024103

Flake lock file updates:

• Updated input 'authentik-src':
    'github:goauthentik/authentik/66a4970014da49ceec0715e5dec8c9aa032a3146' (2024-11-14)
  → 'github:goauthentik/authentik/a9776a83d38850da3b2212efa9485a73b46e512f' (2024-11-21)
2024-11-21 17:47:01 +01:00
WilliButz
91ff8d93f0
terraform-provider: 2024.10.0 -> 2024.10.1 2024-11-14 23:20:32 +01:00
WilliButz
7c97a8bf17
update: 2024.10.1 -> 2024.10.2
See https://docs.goauthentik.io/docs/releases/2024.10#fixed-in-2024102

Flake lock file updates:

• Updated input 'authentik-src':
    'github:goauthentik/authentik/665de8ef2211524f3cc13dce9344bd59c61c3a5c' (2024-11-05)
  → 'github:goauthentik/authentik/66a4970014da49ceec0715e5dec8c9aa032a3146' (2024-11-14)
2024-11-14 22:49:50 +01:00
WilliButz
5af11599ea
github-workflows: run flake check 2024-11-05 20:46:32 +01:00
WilliButz
7e39d653fd
terraform-provider: 2024.8.4 -> 2024.10.0 2024-11-05 19:26:29 +01:00
WilliButz
9c827b98b4
update: 2024.10.0 -> 2024.10.1
See https://docs.goauthentik.io/docs/releases/2024.10#fixed-in-2024101

Flake lock file updates:

• Updated input 'authentik-src':
    'github:goauthentik/authentik/6ce33ab912d764a87ec75876febcd57a6355f3c8' (2024-10-30)
  → 'github:goauthentik/authentik/665de8ef2211524f3cc13dce9344bd59c61c3a5c' (2024-11-05)
2024-11-05 18:57:55 +01:00
WilliButz
26829732e1
update: 2024.8.4 -> 2024.10.0
See https://docs.goauthentik.io/docs/releases/2024.10
2024-10-31 17:01:18 +01:00
WilliButz
4e1f5a6a36
flake.lock: Update
Flake lock file updates:

• Updated input 'flake-parts':
    'github:hercules-ci/flake-parts/bcef6817a8b2aa20a5a6dbb19b43e63c5bf8619a' (2024-09-12)
  → 'github:hercules-ci/flake-parts/3d04084d54bedc3d6b8b736c70ef449225c361b1' (2024-10-01)
• Updated input 'flake-parts/nixpkgs-lib':
    'https://github.com/NixOS/nixpkgs/archive/356624c12086a18f2ea2825fed34523d60ccc4e3.tar.gz?narHash=sha256-Ss8QWLXdr2JCBPcYChJhz4xJm%2Bh/xjl4G0c0XlP6a74%3D' (2024-09-01)
  → 'https://github.com/NixOS/nixpkgs/archive/fb192fec7cc7a4c26d51779e9bab07ce6fa5597a.tar.gz?narHash=sha256-0xHYkMkeLVQAMa7gvkddbPqpxph%2BhDzdu1XdGPJR%2BOs%3D' (2024-10-01)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/9357f4f23713673f310988025d9dc261c20e70c6' (2024-09-21)
  → 'github:NixOS/nixpkgs/807e9154dcb16384b1b765ebe9cd2bba2ac287fd' (2024-10-29)
• Updated input 'poetry2nix':
    'github:nix-community/poetry2nix/7624b3e0275d9b52dbdda46ef7ffee66b36ff823' (2024-09-24)
  → 'github:nix-community/poetry2nix/43a898b4d76f7f3f70df77a2cc2d40096bc9d75e' (2024-10-30)
• Updated input 'poetry2nix/nix-github-actions':
    'github:nix-community/nix-github-actions/5163432afc817cf8bd1f031418d1869e4c9d5547' (2023-12-29)
  → 'github:nix-community/nix-github-actions/e04df33f62cdcf93d73e9a04142464753a16db67' (2024-10-24)
• Updated input 'poetry2nix/treefmt-nix':
    'github:numtide/treefmt-nix/8df5ff62195d4e67e2264df0b7f5e8c9995fd0bd' (2024-06-30)
  → 'github:numtide/treefmt-nix/9ef337e492a5555d8e17a51c911ff1f02635be15' (2024-10-28)
2024-10-31 17:41:50 +01:00
WilliButz
d364fb819d
terraform-provider: 2024.6.0 -> 2024.8.4 2024-10-31 16:44:32 +01:00
WilliButz
74b5a8c5ff
update: 2024.8.3 -> 2024.8.4
See https://docs.goauthentik.io/docs/releases/2024.8#fixed-in-202484

Flake lock file updates:

• Updated input 'authentik-src':
    'github:goauthentik/authentik/91d2445c61da49026f76dceb7f5b524e30335a42' (2024-09-27)
  → 'github:goauthentik/authentik/e8b5e4c1272151f4a3666e53754f7deefb8e2fb3' (2024-10-30)
2024-10-31 16:18:21 +01:00
WilliButz
31128721a9
README: update matrix room address 2024-09-30 14:30:31 +02:00
WilliButz
1138b948d3
update: 2024.8.1 -> 2024.8.3 (security update)
Fixes CVE-2024-47070 and CVE-2024-47077

See https://docs.goauthentik.io/docs/releases/2024.8#fixed-in-202483

Dropped manually resolved lockfiles, fixed upstream in
https://github.com/goauthentik/authentik/pull/11509

Flake lock file updates:

• Updated input 'authentik-src':
    'github:goauthentik/authentik/f5580d311d01f2202b666f76931ed04f30b9ec30' (2024-09-07)
  → 'github:goauthentik/authentik/91d2445c61da49026f76dceb7f5b524e30335a42' (2024-09-27)
2024-09-27 18:04:42 +02:00
WilliButz
63516a96c0
flake: fix comment about nixpkgs input 2024-09-27 18:03:30 +02:00
WilliButz
5bf15f6630
Merge pull request #34 from Ma27/flake-update
Update `nixpkgs` input
2024-09-27 17:26:51 +02:00
Maximilian Bosch
97f96dc50f
poetry2nix-python-overrides: fix build of opencontainers
`pytest-runner` was dropped upstream, the build of opencontainers is
fine even without it.
2024-09-25 18:55:29 +02:00
Maximilian Bosch
643fe9d34c
flake.lock: Update
Flake lock file updates:

• Updated input 'flake-parts':
    'github:hercules-ci/flake-parts/567b938d64d4b4112ee253b9274472dc3a346eb6' (2024-09-01)
  → 'github:hercules-ci/flake-parts/bcef6817a8b2aa20a5a6dbb19b43e63c5bf8619a' (2024-09-12)
• Updated input 'flake-utils':
    'github:numtide/flake-utils/b1d9ab70662946ef0850d488da1c9019f3a9752a' (2024-03-11)
  → 'github:numtide/flake-utils/c1dfcf08411b08f6b8615f7d8971a2bfa81d5e8a' (2024-09-17)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/574d1eac1c200690e27b8eb4e24887f8df7ac27c' (2024-09-06)
  → 'github:NixOS/nixpkgs/9357f4f23713673f310988025d9dc261c20e70c6' (2024-09-21)
• Updated input 'poetry2nix':
    'github:nix-community/poetry2nix/a313fd7169ae43ecd1a2ea2f1e4899fe3edba4d2' (2024-09-05)
  → 'github:nix-community/poetry2nix/7624b3e0275d9b52dbdda46ef7ffee66b36ff823' (2024-09-24)
2024-09-25 13:22:14 +02:00
WilliButz
0fd076529b
components: fix typo 2024-09-08 17:29:30 +02:00
WilliButz
0932385a36
module: restart services on-failure 2024-09-08 17:12:43 +02:00
WilliButz
7dc6bd5377
flake: use napalm fork to avoid stackoverflow
It seems that the set of npm dependencies is large enough for foldl to
overflow the stack since the latest update. Use the fork with the fix
for now until its properly upstreamed.

Fixes #31

Flake lock file updates:

• Updated input 'napalm':
    'github:nix-community/napalm/e1babff744cd278b56abe8478008b4a9e23036cf' (2024-06-09)
  → 'github:willibutz/napalm/b492440d9e64ae20736d3bec5c7715ffcbde83f5' (2024-09-08)
2024-09-08 16:43:11 +02:00
WilliButz
f1bd855c23
flake: make systems overridable
Flake lock file updates:

• Added input 'systems':
    'github:nix-systems/default-linux/31732fcf5e8fea42e59c2488ad31a0e651500f68' (2023-07-14)
2024-09-07 22:12:39 +02:00
WilliButz
ee7e7ed147
tests: improve vmtest
`wait_for_text()` takes a regex and it seems that sometimes OCR fails to
recognize the dots in the version string. To make this more resilient,
zero or one symbol is not matched between the numerical components of
the version string.
2024-09-07 22:07:37 +02:00
WilliButz
a1630aaf9f
update: 2024.6.4 -> 2024.8.1
Release notes: https://docs.goauthentik.io/docs/releases/2024.8

Still includes the same hacky workaround for one of the dependencies
that was introduced in the 2024.6.1 update. See components/docs.nix for
more information.

Also, as upstream package-lock.json files do not include source hashes
and urls for a lot of dependencies, building authentik from source is
only possible after they've been resolved. This makes it kind of a
gamble to try and reproduce a build with the same set of dependencies
that the devs use. This is why the two relevant lock files are vendored
here now. See upstream issues for more information:
- https://github.com/goauthentik/authentik/issues/6180
- https://github.com/goauthentik/authentik/issues/11169
and the npm issue for the underlying reason:
https://github.com/npm/cli/issues/4263

Flake lock file updates:

• Updated input 'flake-parts':
    'github:hercules-ci/flake-parts/8471fe90ad337a8074e957b69ca4d0089218391d' (2024-08-01)
  → 'github:hercules-ci/flake-parts/567b938d64d4b4112ee253b9274472dc3a346eb6' (2024-09-01)
• Updated input 'flake-parts/nixpkgs-lib':
    'https://github.com/NixOS/nixpkgs/archive/a5d394176e64ab29c852d03346c1fc9b0b7d33eb.tar.gz?narHash=sha256-uFf2QeW7eAHlYXuDktm9c25OxOyCoUOQmh5SZ9amE5Q%3D' (2024-08-01)
  → 'https://github.com/NixOS/nixpkgs/archive/356624c12086a18f2ea2825fed34523d60ccc4e3.tar.gz?narHash=sha256-Ss8QWLXdr2JCBPcYChJhz4xJm%2Bh/xjl4G0c0XlP6a74%3D' (2024-09-01)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/c374d94f1536013ca8e92341b540eba4c22f9c62' (2024-08-21)
  → 'github:NixOS/nixpkgs/574d1eac1c200690e27b8eb4e24887f8df7ac27c' (2024-09-06)
• Updated input 'poetry2nix':
    'github:nix-community/poetry2nix/884b66152b0c625b8220b570a31dc7acc36749a3' (2024-08-21)
  → 'github:nix-community/poetry2nix/a313fd7169ae43ecd1a2ea2f1e4899fe3edba4d2' (2024-09-05)
2024-09-07 22:07:37 +02:00
WilliButz
39cf62b921
README: add note about cachix
Fixes #23
2024-08-22 23:27:05 +02:00
WilliButz
5ca95f49ec
flake.lock: Update
Flake lock file updates:

• Updated input 'flake-parts':
    'github:hercules-ci/flake-parts/c3c5ecc05edc7dafba779c6c1a61cd08ac6583e9' (2024-06-30)
  → 'github:hercules-ci/flake-parts/8471fe90ad337a8074e957b69ca4d0089218391d' (2024-08-01)
• Updated input 'flake-parts/nixpkgs-lib':
    'https://github.com/NixOS/nixpkgs/archive/eb9ceca17df2ea50a250b6b27f7bf6ab0186f198.tar.gz?narHash=sha256-lIbdfCsf8LMFloheeE6N31%2BBMIeixqyQWbSr2vk79EQ%3D' (2024-06-01)
  → 'https://github.com/NixOS/nixpkgs/archive/a5d394176e64ab29c852d03346c1fc9b0b7d33eb.tar.gz?narHash=sha256-uFf2QeW7eAHlYXuDktm9c25OxOyCoUOQmh5SZ9amE5Q%3D' (2024-08-01)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/feb2849fdeb70028c70d73b848214b00d324a497' (2024-07-09)
  → 'github:NixOS/nixpkgs/c374d94f1536013ca8e92341b540eba4c22f9c62' (2024-08-21)
• Updated input 'poetry2nix':
    'github:nix-community/poetry2nix/4fd045cdb85f2a0173021a4717dc01d92d7ab2b2' (2024-06-28)
  → 'github:nix-community/poetry2nix/884b66152b0c625b8220b570a31dc7acc36749a3' (2024-08-21)
• Updated input 'poetry2nix/treefmt-nix':
    'github:numtide/treefmt-nix/68eb1dc333ce82d0ab0c0357363ea17c31ea1f81' (2024-06-16)
  → 'github:numtide/treefmt-nix/8df5ff62195d4e67e2264df0b7f5e8c9995fd0bd' (2024-06-30)
2024-08-22 23:05:34 +02:00
WilliButz
e7f57f7067
update: 2024.6.3 -> 2024.6.4 (security update)
Fixes CVE-2024-42490

See https://docs.goauthentik.io/docs/releases/2024.6#fixed-in-202464

Flake lock file updates:

• Updated input 'authentik-src':
    'github:goauthentik/authentik/8f207c75046d722c17dee2bcf65fa386b06f5b9a' (2024-08-05)
  → 'github:goauthentik/authentik/8a0b31b9227ca33b96c5448f185419f17090ed38' (2024-08-22)
2024-08-22 22:57:31 +02:00
WilliButz
80fc873618
update: 2024.6.2 -> 2024.6.3
See https://docs.goauthentik.io/docs/releases/2024.6#fixed-in-202463

Flake lock file updates:

• Updated input 'authentik-src':
    'github:goauthentik/authentik/d6904b6aa1440f98f8061c3d12f7358c21b5ae2d' (2024-07-31)
  → 'github:goauthentik/authentik/8f207c75046d722c17dee2bcf65fa386b06f5b9a' (2024-08-05)
2024-08-05 19:44:09 +02:00
WilliButz
9067dd09db
update: 2024.6.1 -> 2024.6.2
Release notes: https://docs.goauthentik.io/docs/releases/2024.6#fixed-in-202462

Flake lock file updates:

• Updated input 'authentik-src':
    'github:goauthentik/authentik/9075270b01e784d25f2ec08b82e73f1ce3086184' (2024-07-11)
  → 'github:goauthentik/authentik/d6904b6aa1440f98f8061c3d12f7358c21b5ae2d' (2024-07-31)
2024-08-03 10:24:41 +02:00
WilliButz
89cfaf2eb1
terraform-provider: 2024.4.1 -> 2024.6.0 2024-07-12 13:46:53 +02:00
WilliButz
0fc8ad1349
update: 2024.4.3 -> 2024.6.1
Release notes: https://docs.goauthentik.io/docs/releases/2024.6

Includes a hacky workaround for a node dependency that is required to
build the `/website` subdirectory of the authentik repo, i.e. "docs".
That should not be required after the next major update, as the
dependency causing this is no longer used on authentik's main branch.

See components/docs.nix for more info.

Flake lock file updates:

• Updated input 'authentik-src':
    'github:goauthentik/authentik/5afceaa55f4d831db0cf9d80562e86eb43b622ec' (2024-06-26)
  → 'github:goauthentik/authentik/9075270b01e784d25f2ec08b82e73f1ce3086184' (2024-07-11)
• Updated input 'flake-parts':
    'github:hercules-ci/flake-parts/9126214d0a59633752a136528f5f3b9aa8565b7d' (2024-04-01)
  → 'github:hercules-ci/flake-parts/c3c5ecc05edc7dafba779c6c1a61cd08ac6583e9' (2024-06-30)
• Updated input 'flake-parts/nixpkgs-lib':
    'github:NixOS/nixpkgs/d8fe5e6c92d0d190646fb9f1056741a229980089?dir=lib' (2024-03-29)
  → 'https://github.com/NixOS/nixpkgs/archive/eb9ceca17df2ea50a250b6b27f7bf6ab0186f198.tar.gz?narHash=sha256-lIbdfCsf8LMFloheeE6N31%2BBMIeixqyQWbSr2vk79EQ%3D' (2024-06-01)
• Updated input 'napalm':
    'github:nix-community/napalm/edcb26c266ca37c9521f6a97f33234633cbec186' (2023-12-20)
  → 'github:nix-community/napalm/e1babff744cd278b56abe8478008b4a9e23036cf' (2024-06-09)
• Updated input 'nixpkgs':
    'github:nixos/nixpkgs/6143fc5eeb9c4f00163267708e26191d1e918932' (2024-04-21)
  → 'github:NixOS/nixpkgs/feb2849fdeb70028c70d73b848214b00d324a497' (2024-07-29)
• Updated input 'poetry2nix':
    'github:nix-community/poetry2nix/e6b36523407ae6a7a4dfe29770c30b3a3563b43a' (2024-05-06)
  → 'github:nix-community/poetry2nix/4fd045cdb85f2a0173021a4717dc01d92d7ab2b2' (2024-06-28)
• Updated input 'poetry2nix/treefmt-nix':
    'github:numtide/treefmt-nix/c6aaf729f34a36c445618580a9f95a48f5e4e03f' (2024-04-25)
  → 'github:numtide/treefmt-nix/68eb1dc333ce82d0ab0c0357363ea17c31ea1f81' (2024-06-16)
2024-07-12 12:24:51 +02:00
WilliButz
262910c7e9
README: add new matrix room 2024-07-12 12:24:51 +02:00
WilliButz
bb756751b0
update: 2024.4.2 -> 2024.4.3 (security update)
Fixes CVE-2024-37905 and CVE-2024-38371

See https://docs.goauthentik.io/docs/releases/2024.4#fixed-in-202443

Flake lock file update:
• Updated input 'authentik-src':
    'github:goauthentik/authentik/1f5953b5b7e72c085246e8f19b94482dac946d83' (2024-05-07)
  → 'github:goauthentik/authentik/5afceaa55f4d831db0cf9d80562e86eb43b622ec' (2024-06-26)
2024-06-26 13:36:02 +02:00
WilliButz
1942bdac27
Merge pull request #25 from Ma27/media-root-cfg-fix
module: fix media root config
2024-06-07 13:19:13 +02:00
WilliButz
46785dd20a
Merge pull request #26 from Ma27/go-testing
components/gopkgs: skip tests
2024-06-07 13:17:48 +02:00
Maximilian Bosch
a220eb605f
components/gopkgs: skip tests
There aren't any tests, but it's hanging in this phase for a while since
it compiles Go code to see if there are any tests in the modules.

    authentik-gopkgs> Running phase: checkPhase
    authentik-gopkgs> ?     goauthentik.io/cmd/ldap [no test files]
    authentik-gopkgs> ?     goauthentik.io/cmd/server       [no test files]
    authentik-gopkgs> ?     goauthentik.io/cmd/proxy        [no test files]
    authentik-gopkgs> ?     goauthentik.io/cmd/radius       [no test files]
2024-06-02 21:07:19 +02:00
Maximilian Bosch
d4c45b01f2
module: fix media root config
Was changed within upstream commit abc0c2d2a2a0bfb0214798ed6bca9d59359b39f8.

The sole reason this worked was that `settings.storage.media.file.path`
pointed to `./media`, relative to `/var/lib/authentik`.

Update our config accordingly.
2024-06-02 17:40:27 +02:00
WilliButz
e9ae3992d5
flake: comment out override-scope test for ci 2024-05-08 21:59:17 +02:00
WilliButz
dd78a73a98
terraform-provider: 2024.4.0 -> 2024.4.1 2024-05-08 13:09:35 +02:00
WilliButz
53e00921be
update: 2024.4.1 -> 2024.4.2
- removed patch for frontend package-lock.json, meaning IFD (import from
  derivation) is no longer an issue

Flake lock file updates:

• Updated input 'authentik-src':
    'github:goauthentik/authentik/ca70c963e55daf73b479a4513da06ac5cea77718' (2024-04-26)
  → 'github:goauthentik/authentik/1f5953b5b7e72c085246e8f19b94482dac946d83' (2024-05-07)
• Updated input 'poetry2nix':
    'github:nix-community/poetry2nix/9245811b58905453033f1ef551f516cbee71c42c' (2024-04-26)
  → 'github:nix-community/poetry2nix/e6b36523407ae6a7a4dfe29770c30b3a3563b43a' (2024-05-06)
• Updated input 'poetry2nix/treefmt-nix':
    'github:numtide/treefmt-nix/e504621290a1fd896631ddbc5e9c16f4366c9f65' (2024-02-19)
  → 'github:numtide/treefmt-nix/c6aaf729f34a36c445618580a9f95a48f5e4e03f' (2024-04-25)
2024-05-08 13:00:03 +02:00
WilliButz
47e376250e
module: increase priority for posgresql package default
This gives the default value from this module a slightly higher
priority than the upstream module's default, while still allowing users
to simply set `services.postgresql.package` using the default priority.

The change in 8bc790171f introduced
`mkDefault` for the postgresql package.
Unfortunately the upstream package option default is also specified
using `mkDefault` instead of the more appropriate `mkOptionDefault`.

This meant that users with a `system.stateVersion` other than `22.05`,
`22.11` or `23.05` got an evaluation error because there are two
conflicting definitions for the package option.
2024-05-02 18:27:53 +02:00
WilliButz
e9a0d0e62f
tests: update instructions, fix override-scope test
Fixes divergence between the two test scripts.
The test doesn't need to be executed by default. It is just a
demonstration on how to use a custom scope that can be created with
the function `mkAuthentikScope`, that is available through the `lib`
flake output.
2024-05-02 17:05:13 +02:00
WilliButz
e3a0712b29
Merge pull request #18 from quentinmit/softer-integration
Reduce NixOS config overrides
2024-04-30 16:48:25 +02:00
WilliButz
965f4d4012
module: drop default settings for airgapped mode
These settings were originally taken from
https://docs.goauthentik.io/docs/installation/air-gapped
but I think they should be configured by users themselves rather than
being enforced by this module.

Notes:
* error reporting is already disabled by default
* the update check setting obviously didn't do anthing as the update
  check was always running
* "startup analytics" currently refers to a post request[1] to upstream authentik,
  that includes the running version and a SHA-512 digest of the unique
  installation id and an env string that refers to the environment in which
  authentik is running, that should be "custom"[2] for NixOS.

[1]: https://github.com/goauthentik/authentik/blob/version/2024.4.1/lifecycle/gunicorn.conf.py#L122-L137
[2]: https://github.com/goauthentik/authentik/blob/version/2024.4.1/authentik/lib/utils/reflection.py#L52-L64
2024-04-28 14:18:53 +02:00
WilliButz
876db63217
module: don't set services.postgresql.package for new installations 2024-04-28 14:18:53 +02:00
Quentin Smith
8bc790171f
module: don't force Postgres 14 2024-04-28 13:13:42 +02:00
Quentin Smith
c178d820d7
module: use TZ environment variable to set UTC timezone instead of overriding system zone 2024-04-28 13:13:26 +02:00
WilliButz
d2a70db150
terraform-provider: 2023.10.0 -> 2024.4.0 2024-04-27 22:09:32 +02:00