aboutsummaryrefslogtreecommitdiff
path: root/modules
diff options
context:
space:
mode:
Diffstat (limited to 'modules')
-rw-r--r--modules/authentik/default.nix5
1 files changed, 5 insertions, 0 deletions
diff --git a/modules/authentik/default.nix b/modules/authentik/default.nix
index dc87336..9cc3a3f 100644
--- a/modules/authentik/default.nix
+++ b/modules/authentik/default.nix
@@ -32,6 +32,11 @@ in
environmentFile = "/etc/secrets/authentik/ldap.env";
};
+ systemd.services.authentik-ldap.serviceConfig = {
+ AmbientCapabilities = [ "CAP_NET_BIND_SERVICE" ];
+ CapabilityBoundingSet = [ "CAP_NET_BIND_SERVICE" ];
+ };
+
services.authentik-proxy = {
enable = true;
environmentFile = "/etc/secrets/authentik/proxy.env";