diff options
| author | adikro <adikro@disroot.org> | 2026-06-12 00:53:25 +0200 |
|---|---|---|
| committer | adikro <adikro@disroot.org> | 2026-06-12 00:53:25 +0200 |
| commit | 1eba5398fd09f98bd11cbf8c3b80f20bb9ce1f2d (patch) | |
| tree | c103e3d6ee0e3b2a1e3ac8fd525c08eb7d37e938 /os/srv/authelia.nix | |
| parent | 66eff7dbb117ccf9cbf743036f058d5dcb0a78e6 (diff) | |
microvm and dns stuff
Diffstat (limited to 'os/srv/authelia.nix')
| -rw-r--r-- | os/srv/authelia.nix | 18 |
1 files changed, 12 insertions, 6 deletions
diff --git a/os/srv/authelia.nix b/os/srv/authelia.nix index a7a8c19..52b7114 100644 --- a/os/srv/authelia.nix +++ b/os/srv/authelia.nix @@ -8,11 +8,13 @@ let cfg = config.os.srv.authelia; in { - options.os.srv.authelia.enable = lib.mkEnableOption "enables authelia scanning"; - options.os.services.authelia.extraRules = lib.mkOption { - type = lib.types.listOf lib.types.attrs; - default = [ ]; - description = "Additional access control rules to be appended to Authelia."; + options.os.srv.authelia = { + enable = lib.mkEnableOption "enables authelia scanning"; + extraRules = lib.mkOption { + type = lib.types.listOf lib.types.attrs; + default = [ ]; + description = "Additional access control rules to be appended to Authelia."; + }; }; config = lib.mkIf cfg.enable { assertions = [ @@ -20,6 +22,10 @@ in assertion = config.os.srv.sops.enable; message = "Required for password secure password storing"; } + { + assertion = config.os.srv.lldap.enable; + message = "required for user accounts"; + } ]; services.authelia.instances.main = { enable = true; @@ -46,7 +52,7 @@ in policy = "bypass"; } ] - ++ config.os.services.authelia.extraRules; + ++ cfg.extraRules; }; session.domain = masterDomain; }; |
