change authelia user

This commit is contained in:
2023-08-17 02:39:23 +02:00
parent fb9ab56b9b
commit 758b075645

View File

@@ -2,26 +2,24 @@
{ {
sops.secrets.authelia-jwt-secret = { sops.secrets.authelia-jwt-secret = {
owner = "authelia_main"; owner = "authelia-main";
sopsFile = ./secrets.yaml; sopsFile = ./secrets.yaml;
}; };
sops.secrets.authelia-backend-ldap-password = { sops.secrets.authelia-backend-ldap-password = {
owner = "authelia_main"; owner = "authelia-main";
sopsFile = ./secrets.yaml; sopsFile = ./secrets.yaml;
}; };
sops.secrets.authelia-storage-encryption-key = { sops.secrets.authelia-storage-encryption-key = {
owner = "authelia_main"; owner = "authelia-main";
sopsFile = ./secrets.yaml; sopsFile = ./secrets.yaml;
}; };
sops.secrets.authelia-session-secret = { sops.secrets.authelia-session-secret = {
owner = "authelia_main"; owner = "authelia-main";
sopsFile = ./secrets.yaml; sopsFile = ./secrets.yaml;
}; };
services.authelia.instances.main = { services.authelia.instances.main = {
enable = true; enable = true;
user = "authelia_main";
group = "authelia_main";
secrets = { secrets = {
jwtSecretFile = config.sops.secrets.authelia-jwt-secret.path; jwtSecretFile = config.sops.secrets.authelia-jwt-secret.path;
storageEncryptionKeyFile = config.sops.secrets.authelia-storage-encryption-key.path; storageEncryptionKeyFile = config.sops.secrets.authelia-storage-encryption-key.path;
@@ -101,14 +99,14 @@
# timeout = "5s"; # timeout = "5s";
# }; # };
local = { local = {
path = "/var/lib/authelia_main/db.sqlite3"; path = "/var/lib/authelia-main/db.sqlite3";
}; };
}; };
notifier = { notifier = {
disable_startup_check = false; disable_startup_check = false;
filesystem = { filesystem = {
filename = "/var/lib/authelia_main/notification.txt"; filename = "/var/lib/authelia-main/notification.txt";
}; };
}; };
}; };
@@ -123,25 +121,4 @@
proxyWebsockets = true; proxyWebsockets = true;
}; };
}; };
services.mysql.ensureUsers = [
{
name = "authelia_main";
ensurePermissions = {
"authelia_main.*" = "ALL PRIVILEGES";
};
}
];
services.mysql.ensureDatabases = [ "authelia_main" ];
services.mysqlBackup.databases = [ "authelia_main" ];
users.groups."authelia_main" = {
name = "authelia_main";
};
users.users."authelia_main" = {
name = "authelia_main";
isSystemUser = true;
group = "authelia_main";
};
} }