From c90eda3a993f580739000f443ef30a708caf4bc4 Mon Sep 17 00:00:00 2001 From: Max Audron Date: Thu, 31 Jul 2025 22:46:18 +0200 Subject: fix authentik-ldap port bindings --- modules/authentik/default.nix | 5 +++++ secrets | 2 +- 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/modules/authentik/default.nix b/modules/authentik/default.nix index dc87336..9cc3a3f 100644 --- a/modules/authentik/default.nix +++ b/modules/authentik/default.nix @@ -32,6 +32,11 @@ in environmentFile = "/etc/secrets/authentik/ldap.env"; }; + systemd.services.authentik-ldap.serviceConfig = { + AmbientCapabilities = [ "CAP_NET_BIND_SERVICE" ]; + CapabilityBoundingSet = [ "CAP_NET_BIND_SERVICE" ]; + }; + services.authentik-proxy = { enable = true; environmentFile = "/etc/secrets/authentik/proxy.env"; diff --git a/secrets b/secrets index 421236f..25b1d46 160000 --- a/secrets +++ b/secrets @@ -1 +1 @@ -Subproject commit 421236f500d491540f6ef112f47baaaed9f6b7c2 +Subproject commit 25b1d46edbbd5c9faad93c40ddfad9696b9e3cc9 -- cgit v1.2.3