Cloonar/nixos
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

change authelia user

Browse source
This commit is contained in:
Dominik Polakovics Polakovics 2023-08-17 02:03:09 +02:00
parent 12f0c9bb1e
commit 1055714683
1 changed files with 11 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

21
utils/modules/authelia/default.nix
View file

@ -2,24 +2,25 @@
{ {
sops.secrets.authelia-jwt-secret = { sops.secrets.authelia-jwt-secret = {
owner = "authelia-main"; owner = "authelia_main";
sopsFile = ./secrets.yaml; sopsFile = ./secrets.yaml;
}; };
sops.secrets.authelia-backend-ldap-password = { sops.secrets.authelia-backend-ldap-password = {
owner = "authelia-main"; owner = "authelia_main";
sopsFile = ./secrets.yaml; sopsFile = ./secrets.yaml;
}; };
sops.secrets.authelia-storage-encryption-key = { sops.secrets.authelia-storage-encryption-key = {
owner = "authelia-main"; owner = "authelia_main";
sopsFile = ./secrets.yaml; sopsFile = ./secrets.yaml;
}; };
sops.secrets.authelia-session-secret = { sops.secrets.authelia-session-secret = {
owner = "authelia-main"; owner = "authelia_main";
sopsFile = ./secrets.yaml; sopsFile = ./secrets.yaml;
}; };
services.authelia.instances.main = { services.authelia.instances.main = {
enable = true; enable = true;
user = "authelia_main";
secrets = { secrets = {
jwtSecretFile = config.sops.secrets.authelia-jwt-secret.path; jwtSecretFile = config.sops.secrets.authelia-jwt-secret.path;
storageEncryptionKeyFile = config.sops.secrets.authelia-storage-encryption-key.path; storageEncryptionKeyFile = config.sops.secrets.authelia-storage-encryption-key.path;
@ -92,8 +93,8 @@
storage = { storage = {
mysql = { mysql = {
host = "/run/mysqld/mysqld.sock'"; host = "/run/mysqld/mysqld.sock'";
database = "authelia"; database = "authelia_main";
username = "authelia"; username = "authelia_main";
password = "socket_auth"; password = "socket_auth";
timeout = "5s"; timeout = "5s";
}; };
@ -120,13 +121,13 @@
services.mysql.ensureUsers = [ services.mysql.ensureUsers = [
{ {
name = "authelia-main"; name = "authelia_main";
ensurePermissions = { ensurePermissions = {
"authelia-main.*" = "ALL PRIVILEGES"; "authelia_main.*" = "ALL PRIVILEGES";
}; };
} }
]; ];
services.mysql.ensureDatabases = [ "authelia-main" ]; services.mysql.ensureDatabases = [ "authelia_main" ];
services.mysqlBackup.databases = [ "authelia-main" ]; services.mysqlBackup.databases = [ "authelia_main" ];
} }