change authelia user
This commit is contained in:
@@ -2,26 +2,24 @@
|
|||||||
|
|
||||||
{
|
{
|
||||||
sops.secrets.authelia-jwt-secret = {
|
sops.secrets.authelia-jwt-secret = {
|
||||||
owner = "authelia_main";
|
owner = "authelia-main";
|
||||||
sopsFile = ./secrets.yaml;
|
sopsFile = ./secrets.yaml;
|
||||||
};
|
};
|
||||||
sops.secrets.authelia-backend-ldap-password = {
|
sops.secrets.authelia-backend-ldap-password = {
|
||||||
owner = "authelia_main";
|
owner = "authelia-main";
|
||||||
sopsFile = ./secrets.yaml;
|
sopsFile = ./secrets.yaml;
|
||||||
};
|
};
|
||||||
sops.secrets.authelia-storage-encryption-key = {
|
sops.secrets.authelia-storage-encryption-key = {
|
||||||
owner = "authelia_main";
|
owner = "authelia-main";
|
||||||
sopsFile = ./secrets.yaml;
|
sopsFile = ./secrets.yaml;
|
||||||
};
|
};
|
||||||
sops.secrets.authelia-session-secret = {
|
sops.secrets.authelia-session-secret = {
|
||||||
owner = "authelia_main";
|
owner = "authelia-main";
|
||||||
sopsFile = ./secrets.yaml;
|
sopsFile = ./secrets.yaml;
|
||||||
};
|
};
|
||||||
|
|
||||||
services.authelia.instances.main = {
|
services.authelia.instances.main = {
|
||||||
enable = true;
|
enable = true;
|
||||||
user = "authelia_main";
|
|
||||||
group = "authelia_main";
|
|
||||||
secrets = {
|
secrets = {
|
||||||
jwtSecretFile = config.sops.secrets.authelia-jwt-secret.path;
|
jwtSecretFile = config.sops.secrets.authelia-jwt-secret.path;
|
||||||
storageEncryptionKeyFile = config.sops.secrets.authelia-storage-encryption-key.path;
|
storageEncryptionKeyFile = config.sops.secrets.authelia-storage-encryption-key.path;
|
||||||
@@ -101,14 +99,14 @@
|
|||||||
# timeout = "5s";
|
# timeout = "5s";
|
||||||
# };
|
# };
|
||||||
local = {
|
local = {
|
||||||
path = "/var/lib/authelia_main/db.sqlite3";
|
path = "/var/lib/authelia-main/db.sqlite3";
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
notifier = {
|
notifier = {
|
||||||
disable_startup_check = false;
|
disable_startup_check = false;
|
||||||
filesystem = {
|
filesystem = {
|
||||||
filename = "/var/lib/authelia_main/notification.txt";
|
filename = "/var/lib/authelia-main/notification.txt";
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
@@ -123,25 +121,4 @@
|
|||||||
proxyWebsockets = true;
|
proxyWebsockets = true;
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
services.mysql.ensureUsers = [
|
|
||||||
{
|
|
||||||
name = "authelia_main";
|
|
||||||
ensurePermissions = {
|
|
||||||
"authelia_main.*" = "ALL PRIVILEGES";
|
|
||||||
};
|
|
||||||
}
|
|
||||||
];
|
|
||||||
|
|
||||||
services.mysql.ensureDatabases = [ "authelia_main" ];
|
|
||||||
services.mysqlBackup.databases = [ "authelia_main" ];
|
|
||||||
|
|
||||||
users.groups."authelia_main" = {
|
|
||||||
name = "authelia_main";
|
|
||||||
};
|
|
||||||
users.users."authelia_main" = {
|
|
||||||
name = "authelia_main";
|
|
||||||
isSystemUser = true;
|
|
||||||
group = "authelia_main";
|
|
||||||
};
|
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user