Add the authentik secrets to the authentik module

modules/system/authentik.nix

@@ -0,0 +1,22 @@
+{ pkgs, lib, config, ... }:
+with lib;
+{
+	options.myModules.authentik.enable = mkEnableOption "custom authentik configuration";
+
+	config = mkIf config.myModules.authentik.enable {
+		sops.secrets.authentik-env = {
+			format = "ini";
+			group = "authentik";
+			mode = "0440";
+			owner = "authentik";
+			restartUnits = ["authentik"];
+			sopsFile = ../../secrets/authentik.ini;
+		};
+		users.groups.authentik = {};
+		users.users.authentik = {
+			group = "authentik";
+			isNormalUser = false;
+			isSystemUser = true;
+		};
+	};
+}

modules/system/default.nix

@@ -1,5 +1,6 @@
 {
 	imports = [
+		./authentik.nix
 		./base.nix
 		./cloud-init.nix
 		./do-agent.nix