raphael/nixos
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat!(services/self_host): now SSO is running under the authentik user

Browse source
This commit is contained in:
Raphael 2025-10-31 14:26:32 +01:00
parent 246163fde9
commit 2a36f5c9c1
No known key found for this signature in database
1 changed files with 9 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

9
services/self_host/sso.nix
View file

@ -12,6 +12,15 @@ let
in in
{ {
config = lib.mkIf cfg { config = lib.mkIf cfg {
users = {
users.authentik = {
isSystemUser = true;
description = "Authentik service user";
group = "authentik";
home = "/var/lib/authentik";
};
groups.authentik = {};
};
systemd.tmpfiles.rules = [ systemd.tmpfiles.rules = [
"d /run/authentik 0750 authentik authentik - -" "d /run/authentik 0750 authentik authentik - -"
]; ];