mailserver accepting thunderbid login ldap

authentik.nix

@@ -13,6 +13,7 @@
   };
   services.authentik-ldap = {
     enable = true;
+    environmentFile = "/var/lib/authentik-ldap-env";
   };
   services.authentik = {
     enable = true;
@@ -32,10 +33,25 @@
       avatars = "initials";
     };
 
-    nginx = {
-      enable = true;
-      enableACME = true;
-      host = "auth.${config.networking.domain}";
+    # nginx = {
+    #   enable = true;
+    #   enableACME = true;
+    #   host = "auth.${config.networking.domain}";
+    # };
+  };
+
+  services.nginx = {
+    enable = true;
+    virtualHosts = {
+      "auth.${config.networking.domain}" = {
+        enableACME = true;
+        forceSSL = true;
+        locations."/" = {
+          proxyPass = "http://localhost:9000";
+          proxyWebsockets = true;
+          recommendedProxySettings = true;
+        };
+      };
     };
   };
 }