From 1eba5398fd09f98bd11cbf8c3b80f20bb9ce1f2d Mon Sep 17 00:00:00 2001
From: adikro <adikro@disroot.org>
Date: Fri, 12 Jun 2026 00:53:25 +0200
Subject: microvm and dns stuff

---
 os/srv/authelia.nix | 18 ++++++++++++------
 1 file changed, 12 insertions(+), 6 deletions(-)

(limited to 'os/srv/authelia.nix')

diff --git a/os/srv/authelia.nix b/os/srv/authelia.nix
index a7a8c19..52b7114 100644
--- a/os/srv/authelia.nix
+++ b/os/srv/authelia.nix
@@ -8,11 +8,13 @@ let
   cfg = config.os.srv.authelia;
 in
 {
-  options.os.srv.authelia.enable = lib.mkEnableOption "enables authelia scanning";
-  options.os.services.authelia.extraRules = lib.mkOption {
-    type = lib.types.listOf lib.types.attrs;
-    default = [ ];
-    description = "Additional access control rules to be appended to Authelia.";
+  options.os.srv.authelia = {
+    enable = lib.mkEnableOption "enables authelia scanning";
+    extraRules = lib.mkOption {
+      type = lib.types.listOf lib.types.attrs;
+      default = [ ];
+      description = "Additional access control rules to be appended to Authelia.";
+    };
   };
   config = lib.mkIf cfg.enable {
     assertions = [
@@ -20,6 +22,10 @@ in
         assertion = config.os.srv.sops.enable;
         message = "Required for password secure password storing";
       }
+      {
+        assertion = config.os.srv.lldap.enable;
+        message = "required for user accounts";
+      }
     ];
     services.authelia.instances.main = {
       enable = true;
@@ -46,7 +52,7 @@ in
               policy = "bypass";
             }
           ]
-          ++ config.os.services.authelia.extraRules;
+          ++ cfg.extraRules;
         };
         session.domain = masterDomain;
       };
-- 
cgit v1.3