eblume/blumeops
1
1
Fork 0
Code Issues Pull requests Projects Releases 83 Packages Wiki Activity Actions

Deploy Authentik identity provider (C2 Mikado) #227

Merged
eblume merged 23 commits from feature/deploy-authentik into main 2026-02-20 12:56:00 -08:00
Conversation 0 Commits 23 Files changed 46 +29
1 changed files with 29 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files
Showing only changes of commit ac94cf6c5d - Show all commits

Add Authentik container definition (Nix)
All checks were successful
Build Container / build (push) Successful in 3s
Details
Build Container (Nix) / build (push) Successful in 1m57s
Details

Prev Next 
Nix-built container using pkgs.authentik with ak entrypoint.
Includes bashInteractive (ak is a bash wrapper), cacert, tzdata.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Erich Blume 2026-02-20 10:09:17 -08:00
commit ac94cf6c5d

29
containers/authentik/default.nix Normal file
View file

@ -0,0 +1,29 @@
# Nix-built Authentik identity provider
# Uses nixpkgs authentik package (ak entrypoint wrapping Go server + Python worker)
# Built with dockerTools.buildLayeredImage for efficient layer caching
{ pkgs ? import <nixpkgs> { } }:
pkgs.dockerTools.buildLayeredImage {
name = "blumeops/authentik";
tag = "latest";
contents = [
pkgs.authentik
pkgs.bashInteractive
pkgs.cacert
pkgs.tzdata
];
config = {
Entrypoint = [ "${pkgs.authentik}/bin/ak" ];
Env = [
"SSL_CERT_FILE=${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt"
"TZDIR=${pkgs.tzdata}/share/zoneinfo"
];
ExposedPorts = {
"9000/tcp" = { };
"9443/tcp" = { };
};
User = "65534";
};
}