authentik-nix
authentik-nix is a Nix flake that provides an alternative deployment method for authentik, the open-source identity provider. It offers a packaged build of authentik components (server, worker, outposts), a NixOS module for configuration, a basic VM integration test, and an overridable component scope for custom deployments. The module sets up authentik services alongside a local Postgres instance by default and allows partial overrides of upstream configuration via services.authentik.settings. Secrets such as the authentik secret key and SMTP credentials are injected through a systemd EnvironmentFile, which can be managed with tools like sops-nix or agenix to avoid placing them in the world-readable Nix store. The VM test verifies that services start correctly and the initial setup flow renders properly. This project is community-maintained and not officially supported by the authentik team.