Erich Blume
efa9806bfa
## Mikado Chain: build-authentik-from-source Replace `pkgs.authentik` from nixpkgs with a custom Nix derivation built from source. This removes the dependency on the nixpkgs packaging timeline and gives full version control. Target version: **2025.12.4** (nixpkgs reference, upgrading from deployed 2025.10.1). ### Dependency Graph ``` build-authentik-from-source (goal) ├── authentik-go-server-derivation │ ├── authentik-api-client-generation ← IN PROGRESS │ └── authentik-python-backend-derivation ├── authentik-web-ui-derivation │ └── authentik-api-client-generation ← IN PROGRESS └── authentik-python-backend-derivation ``` ### Ready Leaves - `authentik-api-client-generation` — Go + TypeScript client generation from OpenAPI schema - `authentik-python-backend-derivation` — Django backend with 60+ deps, 4 in-tree packages ### Architecture Ported from [nixpkgs `pkgs/by-name/au/authentik/package.nix`](https://github.com/NixOS/nixpkgs/tree/master/pkgs/by-name/au/authentik): - `source.nix` — shared version/source fetch - `client-go.nix` — Go API client generation - `client-ts.nix` — TypeScript API client generation - `api-go-vendor-hook.nix` — Go vendor directory injection hook - (more components to follow as leaves are closed) ### Related Cards - [[build-authentik-from-source]] — Goal card - [[authentik-api-client-generation]] - [[authentik-python-backend-derivation]] - [[authentik-web-ui-derivation]] - [[authentik-go-server-derivation]] Reviewed-on: https://forge.ops.eblu.me/eblume/blumeops/pulls/274
30 lines
919 B
Nix
30 lines
919 B
Nix
# Centralized version and source pinning for authentik 2026.2.0
|
|
# All sources fetched from forge mirrors for supply chain control
|
|
{ pkgs ? import <nixpkgs> { } }:
|
|
|
|
let
|
|
version = "2026.2.0";
|
|
in
|
|
{
|
|
inherit version;
|
|
|
|
# Main authentik repo — provides schema.yml, Python backend, web UI, Go server
|
|
src = pkgs.fetchgit {
|
|
url = "https://forge.ops.eblu.me/mirrors/authentik.git";
|
|
rev = "version/${version}";
|
|
hash = "sha256-pVQ34cZYX3hlk6hF1aZ/n32xMqTF4Jmp0G0VGDU7iXc=";
|
|
};
|
|
|
|
# Go API client repo — provides config.yaml, go.mod, go.sum, templates
|
|
client-go-src = pkgs.fetchgit {
|
|
url = "https://forge.ops.eblu.me/mirrors/authentik-client-go.git";
|
|
rev = "v3.${version}";
|
|
hash = "sha256-DwXw/0QcSDYQKVhPA8tStrSoZooriQex/9FxSJtR/QY=";
|
|
};
|
|
|
|
meta = with pkgs.lib; {
|
|
description = "Authentik identity provider";
|
|
homepage = "https://goauthentik.io";
|
|
license = licenses.mit;
|
|
};
|
|
}
|