add authentik

modules/k3s/default.nix

@@ -33,11 +33,23 @@ in
       openiscsi
     ];
     
-    sops.secrets.k3s_token = {
-      format = "json";
-      key = "token";
-      sopsFile = "${inputs.secrets}/k3s.json";
-    };
+    sops.secrets = {
+      k3s_token = {
+        format = "json";
+        key = "token";
+        sopsFile = "${inputs.secrets}/cluster/k3s.json";
+      };
+      pg_pass = {
+        format = "json";
+        key = "pg-pass";
+        sopsFile = "${inputs.secrets}/cluster/authentik.json";
+      };
+      authentik_secret_key = {
+        format = "json";
+        key = "authentik-secret-key";
+        sopsFile = "${inputs.secrets}/cluster/authentik.json";
+      };
+    }
     
     services.rpcbind.enable = true;
     services.k3s = {
@@ -49,14 +61,6 @@ in
       disable = [];
     };
 
-    # services.udev.packages = with pkgs; [
-    #   openiscsi
-    # ];
-
-    # services.udev.extraRules = ''
-    #   ACTION=="add", SUBSYSTEM=="scsi_host", KERNEL=="host*", RUN+="${pkgs.bash}/bin/sh -c 'echo - - - > /sys/class/scsi_host/%k/scan'"
-    # '';
-
     systemd.services.k3s = {
       restartTriggers = [
         (builtins.toJSON config.services.k3s.manifests)
@@ -66,10 +70,6 @@ in
       wants = [ "rpcbind.service" ];
       path = with pkgs; [
         openiscsi
-        # util-linux
-        # kmod
-        # systemd
-        # udev
       ];
     };