eblume/blumeops
1
1
Fork 0
Code Issues Pull requests Projects Releases 83 Packages Wiki Activity Actions
blumeops/containers
History
Erich Blume efa9806bfa
All checks were successful
Build Container / detect (push) Successful in 3s
Details
Build Container (Nix) / detect (push) Successful in 1s
Details
Build Container / build (authentik) (push) Successful in 2s
Details
Build Container (Nix) / build (authentik) (push) Successful in 22s
Details
C2: Build authentik from source (Mikado chain) (#274) 
## Mikado Chain: build-authentik-from-source

Replace `pkgs.authentik` from nixpkgs with a custom Nix derivation built from source.
This removes the dependency on the nixpkgs packaging timeline and gives full version control.

Target version: **2025.12.4** (nixpkgs reference, upgrading from deployed 2025.10.1).

### Dependency Graph

```
build-authentik-from-source (goal)
├── authentik-go-server-derivation
│   ├── authentik-api-client-generation  ← IN PROGRESS
│   └── authentik-python-backend-derivation
├── authentik-web-ui-derivation
│   └── authentik-api-client-generation  ← IN PROGRESS
└── authentik-python-backend-derivation
```

### Ready Leaves
- `authentik-api-client-generation` — Go + TypeScript client generation from OpenAPI schema
- `authentik-python-backend-derivation` — Django backend with 60+ deps, 4 in-tree packages

### Architecture
Ported from [nixpkgs `pkgs/by-name/au/authentik/package.nix`](https://github.com/NixOS/nixpkgs/tree/master/pkgs/by-name/au/authentik):
- `source.nix` — shared version/source fetch
- `client-go.nix` — Go API client generation
- `client-ts.nix` — TypeScript API client generation
- `api-go-vendor-hook.nix` — Go vendor directory injection hook
- (more components to follow as leaves are closed)

### Related Cards
- [[build-authentik-from-source]] — Goal card
- [[authentik-api-client-generation]]
- [[authentik-python-backend-derivation]]
- [[authentik-web-ui-derivation]]
- [[authentik-go-server-derivation]]

Reviewed-on: https://forge.ops.eblu.me/eblume/blumeops/pulls/274
2026-03-01 13:45:00 -08:00
..
authentik C2: Build authentik from source (Mikado chain) (#274) 2026-03-01 13:45:00 -08:00
cv Harden zot registry, pt 1 (#231) 2026-02-20 22:50:01 -08:00
devpi Harden zot registry, pt 1 (#231) 2026-02-20 22:50:01 -08:00
grafana C2: Upgrade Grafana to 12.x with Nix container and Kustomize (#260) 2026-02-23 18:07:18 -08:00
homepage Migrate upstream mirrors to mirrors/ Forgejo org (#265) 2026-02-24 20:43:14 -08:00
kiwix-serve Harden zot registry, pt 1 (#231) 2026-02-20 22:50:01 -08:00
kubectl Harden zot registry, pt 1 (#231) 2026-02-20 22:50:01 -08:00
miniflux Switch prometheus, teslamate, miniflux to forge mirrors 2026-02-24 21:01:08 -08:00
navidrome Migrate upstream mirrors to mirrors/ Forgejo org (#265) 2026-02-24 20:43:14 -08:00
nettest Harden zot registry, pt 1 (#231) 2026-02-20 22:50:01 -08:00
ntfy Migrate upstream mirrors to mirrors/ Forgejo org (#265) 2026-02-24 20:43:14 -08:00
prometheus Switch prometheus, teslamate, miniflux to forge mirrors 2026-02-24 21:01:08 -08:00
quartz Harden zot registry, pt 1 (#231) 2026-02-20 22:50:01 -08:00
runner-job-image Rename containers/forgejo-runner to runner-job-image 2026-02-23 17:44:51 -08:00
teslamate Switch prometheus, teslamate, miniflux to forge mirrors 2026-02-24 21:01:08 -08:00
transmission Harden zot registry, pt 1 (#231) 2026-02-20 22:50:01 -08:00