nixos-systems/secrets/authentik.env

AUTHENTIK_EMAIL__USERNAME=ENC[AES256_GCM,data:4PMcNtQZOCcepXOFoHQJe8A+0AdOUGQk76rI2EE=,iv:C5ATwjfF+/lkMhUPUF1u4EMmlfe0oCuagrajKVsmsbQ=,tag:PNM+kYe8rgDmOumtfvzE8A==,type:str]
AUTHENTIK_EMAIL__PASSWORD=ENC[AES256_GCM,data:761BeyOs9Ay9rb64FQAk14SqD54tcy2P,iv:D9Dn+jXKeSBWXvsyvMHcnM4NkNm1FAph/j1XAOYVG00=,tag:pDJzzlLlpNpQPAyr/IIyFQ==,type:str]
AUTHENTIK_SECRET_KEY=ENC[AES256_GCM,data:8jb7qazlI3luTrBuUWNOy/TTkiiYLW+XYqFKmFo8rgRmbfMqKwM6485U7i7GNFHSVqQEaOXc39WEZR6dZILIZ47nJDETeSnMGGgLz8T7UwU=,iv:GV+cfsX+kXED//ladyo9jg5XLOmg8l1bGTqNB7JnwfU=,tag:ddGxFUKrMSVWWjBrDP1N2w==,type:str]
sops_age__list_0__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArWkFYbEl1QmFPRlowMjFJ\nYzdZMU4rNDJScEFYNVo4SEtGQUpEc01WdXhZClNZU29CbWROUUdKRnR0VUorQUd1\nMWV4aHI2bVVmdHFZcUVSSmRkT2ZRV1UKLS0tIFZKTXJyK1cwbUZnUFZzWDR5SUNZ\nRlExL1lTemVLUExOMGtXUlZXZTB4cEEKGQtucDalbNfAEDmquRVeERHSOFQJXmhP\nZ7nxwQCgVwQLIyeHM3T8B86hk7u7mIVUieN2EaxaXhsryfKbX3XEzg==\n-----END AGE ENCRYPTED FILE-----\n
sops_age__list_0__map_recipient=age1fnkhk9rv7r8gh84vxnhvndk4fgh20qcj4hvnfhdpumcydl6m6vrse50lrz
sops_age__list_1__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGUFRJdllERkVKTjByWlB3\nWC9yYzJtMmloNlp3TFg5bDZMR3J2aFFuU0NVClU4TnJaeDdJU2tPZURzVGlsL3My\ndlFneTIzWExSa09MQ1l1cjhpUVA3NmsKLS0tIFBUSjZyVVFQYUlnc2dmVS9nUlpq\nS1hTTjVHWUFkemg3RndWS3RMYmlKN1EK8n8G7XRpUKrBBTbvgRbNYx63IrsKOPkB\nE4xGqYhibpag4BRH41B4008+c6n61MTG4i6gVfQrU8NJD+5n1W0PhQ==\n-----END AGE ENCRYPTED FILE-----\n
sops_age__list_1__map_recipient=age1x704pjnueguchkl54ly8w4w26ltys5900v7xnl7w3zlgasus09jszz45t8
sops_age__list_2__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzZXV5K0U5MFd2ekV4Tmli\nUHRIekVwSCtlWWYxRi9JSmNMb2dGeFBJQXo4CktuUGsxVnk3cnZjc1g0Ry9JcXIw\na2VNUXIzUFk5dGpUbG5WU1J0QkpDem8KLS0tICtYWkt0M1ExdmVSbi93dUhSdC85\nRVpzSHBlSlRNa2lQZEFTak9zVFRiYVUKsVBa6q9q1rQTVZOvKlU5eHE2O7rSqudb\n4C5ZCXcocrNvhUk1IJGkgr4Q2KBUMKHl08BBKQ3xm/wVaCNxXXxDeQ==\n-----END AGE ENCRYPTED FILE-----\n
sops_age__list_2__map_recipient=age15y4k929zaj9fdg3vd40pa40tgvrgv9mn22xfummn5zxfmkcw5d0st6prjx
sops_age__list_3__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5bkEyYmFMWTZIdTBmMkUw\nQWZFMEduNFdjM2FXYVg4RUM5SFczYUtlNGpRCjJQOWdVSFhvTzFZYktLYmZLVExi\nUGxibUYvanRaSFJrMUVXNEFuOWxyRlEKLS0tIEFmUHdIc3BmanR1bk04MStoZHNJ\nSUxFa2dEcjQxZ2F3NXhPVElqU1FneDQK8jKWu12/W7OiuuUeku8qltS0/cOdp4wz\nvok6qqRXUWWVdymzns6E9gWSqPeUHZEnCxiDZxQ7/KQOp4SOasfK5A==\n-----END AGE ENCRYPTED FILE-----\n
sops_age__list_3__map_recipient=age1q5syuyx3n255vllv6elfj72yk5mhxnk9pqawzyy4gzkzmpw3gpjqz9ujx2
sops_age__list_4__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBobm5rR1pZcW9ldjlWUm96\nT2RCWGV1V1RkQjZmKzV2alU2MXZEREY1VURVCkc3aUFybkZRRkhlbFROdGpxTnlD\neFJFRWpNQzQ3ZTV0TFNSN3pid2pzWkkKLS0tIE5MWVBUZURGMkdrQ0VqWFVuMkdL\nZWZYcitaYktqa2pMVWVZUC83aHFxQncKhMigwuguDbhvs8eugVhSjdUYxueKlUqe\nECpbSc8zGP/EyRF7suxBvc0yXE5waXjrdyqe7F3J4TNAB0Nqwf13EA==\n-----END AGE ENCRYPTED FILE-----\n
sops_age__list_4__map_recipient=age1ck44jqpuz3zlthquvuh7wsemrjrgfzhn462sk7rlfetwxpgy0uqs79xn2h
sops_age__list_5__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1NFZCYS94cG9aUHVoOS9j\na1VqeW9zRUZMVlA3Mm1EVWtIbUFacTJDcGh3CmY1a2Q5SkNZVFpxNVZsaUdraHRn\nYi9VS2xETG95UkQycTVhL2E4UlBueUEKLS0tIE91YWtYWTBFUUxJYXltSmFMelFC\neENTd3prc0txWE81MlpwMFVncDdudXcK6GnEbmSIbef7/cHiC8MFbowjfdcmz79/\nHTbfb5CAiIBxEfIRDoz+nVQJ5BOK/IW8JaYC+mM6rrImgl+QfpJqMQ==\n-----END AGE ENCRYPTED FILE-----\n
sops_age__list_5__map_recipient=age1z87rm3qrrspv44nsg73ntn9zys5g498lry4t4cy6x9hffapug5cqfprntm
sops_age__list_6__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4RksvSVFvcEcxK2xBZmpt\nQ0EzTTEyODhEak9VTURyQklPSXFYV3F6Z2pnCkk4bWNKMjBXaXp4VG1JTkxDelB5\naEg0YlAvUTQvRUR0ZmdkZFpLMWUwVjAKLS0tIHMxcDQ5S2ZQTGdzWDVsWGlsR3A4\nRCtQL0tKU0Rtb3d5ek1RSUw4bTdZdXMKJoNPeIpLXiyGYkTO7U0G1r2Tecg4+HQq\nEHhMwbokNfn1Gxruq4btfsYJuaI8NUQPrXBrcR5e6BFPOz+aUU938w==\n-----END AGE ENCRYPTED FILE-----\n
sops_age__list_6__map_recipient=age1t3ryfktuhr3cysf49m9q2n8fkjf9ajjjnhztxw9hz8paxgk4lpcq065jge
sops_age__list_7__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBSzRsS01rVkw5dGN4YnlL\nalR1SjFmR1FFU1NrNVFWWUlQM294VmtudFFzCnh1dHlqOVZnOXhzbVV1RFAycC8w\nMjVobCt0aWZ6aFV3SXdmVzczMnBvbmsKLS0tIHE0MVpHa0lhQWN4ZGo0NHgxUzRU\nZlhoMU5FWUdMVFRleWIwalF1ejdpSzgKziZgNZ94novMzl2/XTl4OoeullMn4CoX\nVo4AjmGpcDCNVI0ifGlcMJue/kGHVGIkU4tFKjqHVFq34dUnt0Oenw==\n-----END AGE ENCRYPTED FILE-----\n
sops_age__list_7__map_recipient=age1j90h7hcp4fctr2xwj4zf9cxuelm43wkujvryc9hk6rzzc37rwdmss035w7
sops_lastmodified=2025-09-09T12:49:14Z
sops_mac=ENC[AES256_GCM,data:l28mT7peCNM8I0g0UdH1OsFHMDAQ7YRo4GBSXMGbVfTmvIO3Qlkav/07ByBnv1HaGbSuRnMeF8zYilNLRO5JXdgUmFrt+QNXYrbFtkEd4boldVIHDDjtj5lyO6xdX/S5BL+engyE+7+DXz1UFkKBKoKqnQupzFLhWoIsFkGxbq0=,iv:IfzlXWHN0LLhVU/T79Wn8kraENMibtijWj8l7LiT4uE=,tag:RNFlpyEd+QBUFGGZC9CvDA==,type:str]
sops_unencrypted_suffix=_unencrypted
sops_version=3.10.2
Switch authentik env file to an actual env file ini is not env. 2025-07-18 17:00:35 +00:00			`AUTHENTIK_EMAIL__USERNAME=ENC[AES256_GCM,data:4PMcNtQZOCcepXOFoHQJe8A+0AdOUGQk76rI2EE=,iv:C5ATwjfF+/lkMhUPUF1u4EMmlfe0oCuagrajKVsmsbQ=,tag:PNM+kYe8rgDmOumtfvzE8A==,type:str]`
			`AUTHENTIK_EMAIL__PASSWORD=ENC[AES256_GCM,data:761BeyOs9Ay9rb64FQAk14SqD54tcy2P,iv:D9Dn+jXKeSBWXvsyvMHcnM4NkNm1FAph/j1XAOYVG00=,tag:pDJzzlLlpNpQPAyr/IIyFQ==,type:str]`
			`AUTHENTIK_SECRET_KEY=ENC[AES256_GCM,data:8jb7qazlI3luTrBuUWNOy/TTkiiYLW+XYqFKmFo8rgRmbfMqKwM6485U7i7GNFHSVqQEaOXc39WEZR6dZILIZ47nJDETeSnMGGgLz8T7UwU=,iv:GV+cfsX+kXED//ladyo9jg5XLOmg8l1bGTqNB7JnwfU=,tag:ddGxFUKrMSVWWjBrDP1N2w==,type:str]`
Add dev_poweredge key For building nix binary cache 2025-12-15 18:47:41 +00:00			`sops_age__list_0__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArWkFYbEl1QmFPRlowMjFJ\nYzdZMU4rNDJScEFYNVo4SEtGQUpEc01WdXhZClNZU29CbWROUUdKRnR0VUorQUd1\nMWV4aHI2bVVmdHFZcUVSSmRkT2ZRV1UKLS0tIFZKTXJyK1cwbUZnUFZzWDR5SUNZ\nRlExL1lTemVLUExOMGtXUlZXZTB4cEEKGQtucDalbNfAEDmquRVeERHSOFQJXmhP\nZ7nxwQCgVwQLIyeHM3T8B86hk7u7mIVUieN2EaxaXhsryfKbX3XEzg==\n-----END AGE ENCRYPTED FILE-----\n`
Add corp dev key This makes it so I can modify secrets files directly on the server I'm bringing up. 2025-09-09 12:32:58 +00:00			`sops_age__list_0__map_recipient=age1fnkhk9rv7r8gh84vxnhvndk4fgh20qcj4hvnfhdpumcydl6m6vrse50lrz`
Add dev_poweredge key For building nix binary cache 2025-12-15 18:47:41 +00:00			`sops_age__list_1__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGUFRJdllERkVKTjByWlB3\nWC9yYzJtMmloNlp3TFg5bDZMR3J2aFFuU0NVClU4TnJaeDdJU2tPZURzVGlsL3My\ndlFneTIzWExSa09MQ1l1cjhpUVA3NmsKLS0tIFBUSjZyVVFQYUlnc2dmVS9nUlpq\nS1hTTjVHWUFkemg3RndWS3RMYmlKN1EK8n8G7XRpUKrBBTbvgRbNYx63IrsKOPkB\nE4xGqYhibpag4BRH41B4008+c6n61MTG4i6gVfQrU8NJD+5n1W0PhQ==\n-----END AGE ENCRYPTED FILE-----\n`
Add corp dev key This makes it so I can modify secrets files directly on the server I'm bringing up. 2025-09-09 12:32:58 +00:00			`sops_age__list_1__map_recipient=age1x704pjnueguchkl54ly8w4w26ltys5900v7xnl7w3zlgasus09jszz45t8`
Add dev_poweredge key For building nix binary cache 2025-12-15 18:47:41 +00:00			`sops_age__list_2__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzZXV5K0U5MFd2ekV4Tmli\nUHRIekVwSCtlWWYxRi9JSmNMb2dGeFBJQXo4CktuUGsxVnk3cnZjc1g0Ry9JcXIw\na2VNUXIzUFk5dGpUbG5WU1J0QkpDem8KLS0tICtYWkt0M1ExdmVSbi93dUhSdC85\nRVpzSHBlSlRNa2lQZEFTak9zVFRiYVUKsVBa6q9q1rQTVZOvKlU5eHE2O7rSqudb\n4C5ZCXcocrNvhUk1IJGkgr4Q2KBUMKHl08BBKQ3xm/wVaCNxXXxDeQ==\n-----END AGE ENCRYPTED FILE-----\n`
Add corp dev key This makes it so I can modify secrets files directly on the server I'm bringing up. 2025-09-09 12:32:58 +00:00			`sops_age__list_2__map_recipient=age15y4k929zaj9fdg3vd40pa40tgvrgv9mn22xfummn5zxfmkcw5d0st6prjx`
Add dev_poweredge key For building nix binary cache 2025-12-15 18:47:41 +00:00			`sops_age__list_3__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5bkEyYmFMWTZIdTBmMkUw\nQWZFMEduNFdjM2FXYVg4RUM5SFczYUtlNGpRCjJQOWdVSFhvTzFZYktLYmZLVExi\nUGxibUYvanRaSFJrMUVXNEFuOWxyRlEKLS0tIEFmUHdIc3BmanR1bk04MStoZHNJ\nSUxFa2dEcjQxZ2F3NXhPVElqU1FneDQK8jKWu12/W7OiuuUeku8qltS0/cOdp4wz\nvok6qqRXUWWVdymzns6E9gWSqPeUHZEnCxiDZxQ7/KQOp4SOasfK5A==\n-----END AGE ENCRYPTED FILE-----\n`
			`sops_age__list_3__map_recipient=age1q5syuyx3n255vllv6elfj72yk5mhxnk9pqawzyy4gzkzmpw3gpjqz9ujx2`
			`sops_age__list_4__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBobm5rR1pZcW9ldjlWUm96\nT2RCWGV1V1RkQjZmKzV2alU2MXZEREY1VURVCkc3aUFybkZRRkhlbFROdGpxTnlD\neFJFRWpNQzQ3ZTV0TFNSN3pid2pzWkkKLS0tIE5MWVBUZURGMkdrQ0VqWFVuMkdL\nZWZYcitaYktqa2pMVWVZUC83aHFxQncKhMigwuguDbhvs8eugVhSjdUYxueKlUqe\nECpbSc8zGP/EyRF7suxBvc0yXE5waXjrdyqe7F3J4TNAB0Nqwf13EA==\n-----END AGE ENCRYPTED FILE-----\n`
			`sops_age__list_4__map_recipient=age1ck44jqpuz3zlthquvuh7wsemrjrgfzhn462sk7rlfetwxpgy0uqs79xn2h`
			`sops_age__list_5__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1NFZCYS94cG9aUHVoOS9j\na1VqeW9zRUZMVlA3Mm1EVWtIbUFacTJDcGh3CmY1a2Q5SkNZVFpxNVZsaUdraHRn\nYi9VS2xETG95UkQycTVhL2E4UlBueUEKLS0tIE91YWtYWTBFUUxJYXltSmFMelFC\neENTd3prc0txWE81MlpwMFVncDdudXcK6GnEbmSIbef7/cHiC8MFbowjfdcmz79/\nHTbfb5CAiIBxEfIRDoz+nVQJ5BOK/IW8JaYC+mM6rrImgl+QfpJqMQ==\n-----END AGE ENCRYPTED FILE-----\n`
			`sops_age__list_5__map_recipient=age1z87rm3qrrspv44nsg73ntn9zys5g498lry4t4cy6x9hffapug5cqfprntm`
			`sops_age__list_6__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4RksvSVFvcEcxK2xBZmpt\nQ0EzTTEyODhEak9VTURyQklPSXFYV3F6Z2pnCkk4bWNKMjBXaXp4VG1JTkxDelB5\naEg0YlAvUTQvRUR0ZmdkZFpLMWUwVjAKLS0tIHMxcDQ5S2ZQTGdzWDVsWGlsR3A4\nRCtQL0tKU0Rtb3d5ek1RSUw4bTdZdXMKJoNPeIpLXiyGYkTO7U0G1r2Tecg4+HQq\nEHhMwbokNfn1Gxruq4btfsYJuaI8NUQPrXBrcR5e6BFPOz+aUU938w==\n-----END AGE ENCRYPTED FILE-----\n`
			`sops_age__list_6__map_recipient=age1t3ryfktuhr3cysf49m9q2n8fkjf9ajjjnhztxw9hz8paxgk4lpcq065jge`
			`sops_age__list_7__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBSzRsS01rVkw5dGN4YnlL\nalR1SjFmR1FFU1NrNVFWWUlQM294VmtudFFzCnh1dHlqOVZnOXhzbVV1RFAycC8w\nMjVobCt0aWZ6aFV3SXdmVzczMnBvbmsKLS0tIHE0MVpHa0lhQWN4ZGo0NHgxUzRU\nZlhoMU5FWUdMVFRleWIwalF1ejdpSzgKziZgNZ94novMzl2/XTl4OoeullMn4CoX\nVo4AjmGpcDCNVI0ifGlcMJue/kGHVGIkU4tFKjqHVFq34dUnt0Oenw==\n-----END AGE ENCRYPTED FILE-----\n`
			`sops_age__list_7__map_recipient=age1j90h7hcp4fctr2xwj4zf9cxuelm43wkujvryc9hk6rzzc37rwdmss035w7`
Get authentik working on the new corp server without podman The podman integration was pretty janky because it relied on running a pod and the NixOS integration with pods are essentially non-existent. This led to issues with the port being improperly forwarded when partially restarted. Now instead I use a flake dedicated to running authentik. This allows me to specify some of the config in the module directly and some in secrets, which is really nice. I've additionally added some changes to the listen address so that the service isn't exposed over public IP addresses. 2025-09-09 13:01:14 +00:00			`sops_lastmodified=2025-09-09T12:49:14Z`
			`sops_mac=ENC[AES256_GCM,data:l28mT7peCNM8I0g0UdH1OsFHMDAQ7YRo4GBSXMGbVfTmvIO3Qlkav/07ByBnv1HaGbSuRnMeF8zYilNLRO5JXdgUmFrt+QNXYrbFtkEd4boldVIHDDjtj5lyO6xdX/S5BL+engyE+7+DXz1UFkKBKoKqnQupzFLhWoIsFkGxbq0=,iv:IfzlXWHN0LLhVU/T79Wn8kraENMibtijWj8l7LiT4uE=,tag:RNFlpyEd+QBUFGGZC9CvDA==,type:str]`
Switch authentik env file to an actual env file ini is not env. 2025-07-18 17:00:35 +00:00			`sops_unencrypted_suffix=_unencrypted`
			`sops_version=3.10.2`