(T)im's N(ix) Flake, Multi-Host Configurations for all of my machines!
74k1.sh/
nixos
nix
feat(pocket-id): init
+65
-2
+1
-2
hosts/nixos/eiri/configuration.nix
+1
-2
hosts/nixos/eiri/configuration.nix
+51
modules/nixos/daemons/pocket-id/default.nix
+51
modules/nixos/daemons/pocket-id/default.nix
···
1
+
{
2
+
inputs,
3
+
outputs,
4
+
config,
5
+
lib,
6
+
pkgs,
7
+
allSecrets,
8
+
...
9
+
}: {
10
+
age.secrets."pocketid_env" = {
11
+
rekeyFile = "${inputs.self}/secrets/pocketid_env.age";
12
+
};
13
+
14
+
services.pocket-id = {
15
+
enable = true;
16
+
settings = {
17
+
APP_URL = "https://auth.${allSecrets.global.domain00}";
18
+
TRUST_PROXY = true;
19
+
ANALYTICS_DISABLED = true;
20
+
21
+
UI_CONFIG_DISABLED = true; # config everything through nix.
22
+
APP_NAME = lib.strings.removeSuffix ".com" allSecrets.global.domain00;
23
+
SESSION_DURATION = 60;
24
+
EMAILS_VERIFIED = true;
25
+
ALLOW_OWN_ACCOUNT_EDIT = true;
26
+
ALLOW_USER_SIGNUPS = false;
27
+
DISABLE_ANIMATIONS = false;
28
+
ACCENT_COLOR = "#816BFF";
29
+
EMAIL_LOGIN_NOTIFICATION_ENABLED = true;
30
+
31
+
SMTP_HOST = allSecrets.global.mail.sender.host;
32
+
SMTP_PORT = allSecrets.global.mail.sender.port;
33
+
SMTP_FROM = allSecrets.global.mail.sender.username;
34
+
SMTP_USER = allSecrets.global.mail.sender.username;
35
+
SMTP_PASSWORD = allSecrets.global.mail.sender.password;
36
+
SMTP_TLS = "starttls";
37
+
# SMTP_SKIP_CERT_VERIFY = "";
38
+
39
+
EMAIL_API_KEY_EXPIRATION_ENABLED = true;
40
+
EMAIL_ONE_TIME_ACCESS_AS_UNAUTHENTICATED_ENABLED = false;
41
+
LDAP_ENABLED = false;
42
+
43
+
# TRACING_ENABLED = true;
44
+
# METRICS_ENABLED = true;
45
+
# OTEL_METRICS_EXPORTER=prometheus
46
+
# OTEL_EXPORTER_PROMETHEUS_HOST=localhost
47
+
# OTEL_EXPORTER_PROMETHEUS_PORT=9464
48
+
};
49
+
environmentFile = config.age.secrets."pocketid_env".path;
50
+
};
51
+
}
+1
modules/nixos/default.nix
+1
modules/nixos/default.nix
···
32
32
paperless = import ./daemons/paperless;
33
33
pcscd = import ./daemons/pcscd;
34
34
plex = import ./daemons/plex;
35
+
pocket-id = import ./daemons/pocket-id;
35
36
quadlet = import ./quadlet;
36
37
restic = import ./daemons/restic;
37
38
rustdesk-server = import ./daemons/rustdesk-server;
+12
secrets/pocketid_env.age
+12
secrets/pocketid_env.age
···
1
+
age-encryption.org/v1
2
+
-> piv-p256 RRcsTA AgRv6TwvgSzjUOaOhz8WCizIPwRfVuyzBP2dyW8yjNBX
3
+
tlBwWhFTPzo5RFx+fkP/FdxQKb2yCEZMumXn1NSiHnw
4
+
-> piv-p256 IBLnbw AqCcD2WIKL7fMLkQsM2IRpaaPJJUsywdY6RoXzFRznH2
5
+
d5lPpQlXaxRqO+repMt/C8Rn78iBotjc5Sh7qBxvAmk
6
+
-> /T5-grease ~ J8 T\:E
7
+
uqsFx6d53bM7Tyh8hIfA1RPY4mUu0wQGGm5iAi1iNdFA1LUMScZFZuY16i3LHMsD
8
+
82g5
9
+
--- NHEBNOCcLtDzgdq91WbUzVJc9wzE3MBfBBH/cAf1R74
10
+
�}��6a���D�Y��$�E%�;�z�����������B��,!V�w�Yns��
2��or.�
11
+
���L{�%T�ٰ�2d)�/B{�������bEq2�������*��x�rS��e�^e��Kڪ��_B�����Y �.����ŹMP���%�wo,�<�����2
12
+
+9�!o= �-�p!�oXvU������`i2
secrets/rekeyed/eiri/8e96d9a375252c61254f62b118ce7292-pocketid_env.age
secrets/rekeyed/eiri/8e96d9a375252c61254f62b118ce7292-pocketid_env.age
This is a binary file and will not be displayed.