WIP: Authentik

hosts/authentik/default.nix

@@ -0,0 +1,38 @@
+{
+  config,
+  pkgs,
+  lib,
+  imports,
+  ...
+}:
+{
+
+  age.secrets.authentik-env.file = ../../secrets/authentik-env.age;
+
+  my = {
+    utils = {
+      commons.enable = true;
+      lxc-standard.enable = true;
+    };
+
+    services.authentik = {
+      enable = true;
+      envFile = config.age.secrets.authentik-env.path;
+      email = {
+        host = "smtp.eu.mailgun.org";
+        port = 587;
+        username = "Auth Pazpi.top";
+        use_tls = true;
+        use_ssl = false;
+        from = "auth@pazpi.top";
+      };
+      proxy.domain = "tegola.pro";
+    };
+    virtualisation.proxmox.enable = true;
+  };
+
+  # Extra packages
+  environment.systemPackages = with pkgs; [ ];
+
+  system.stateVersion = "24.11";
+}