summaryrefslogtreecommitdiff
path: root/os/srv/authelia.nix
diff options
context:
space:
mode:
authoradikro <adikro@disroot.org>2026-06-12 00:53:25 +0200
committeradikro <adikro@disroot.org>2026-06-12 00:53:25 +0200
commit1eba5398fd09f98bd11cbf8c3b80f20bb9ce1f2d (patch)
treec103e3d6ee0e3b2a1e3ac8fd525c08eb7d37e938 /os/srv/authelia.nix
parent66eff7dbb117ccf9cbf743036f058d5dcb0a78e6 (diff)
microvm and dns stuff
Diffstat (limited to 'os/srv/authelia.nix')
-rw-r--r--os/srv/authelia.nix18
1 files changed, 12 insertions, 6 deletions
diff --git a/os/srv/authelia.nix b/os/srv/authelia.nix
index a7a8c19..52b7114 100644
--- a/os/srv/authelia.nix
+++ b/os/srv/authelia.nix
@@ -8,11 +8,13 @@ let
cfg = config.os.srv.authelia;
in
{
- options.os.srv.authelia.enable = lib.mkEnableOption "enables authelia scanning";
- options.os.services.authelia.extraRules = lib.mkOption {
- type = lib.types.listOf lib.types.attrs;
- default = [ ];
- description = "Additional access control rules to be appended to Authelia.";
+ options.os.srv.authelia = {
+ enable = lib.mkEnableOption "enables authelia scanning";
+ extraRules = lib.mkOption {
+ type = lib.types.listOf lib.types.attrs;
+ default = [ ];
+ description = "Additional access control rules to be appended to Authelia.";
+ };
};
config = lib.mkIf cfg.enable {
assertions = [
@@ -20,6 +22,10 @@ in
assertion = config.os.srv.sops.enable;
message = "Required for password secure password storing";
}
+ {
+ assertion = config.os.srv.lldap.enable;
+ message = "required for user accounts";
+ }
];
services.authelia.instances.main = {
enable = true;
@@ -46,7 +52,7 @@ in
policy = "bypass";
}
]
- ++ config.os.services.authelia.extraRules;
+ ++ cfg.extraRules;
};
session.domain = masterDomain;
};