authelia: format

hosts/rpi4/authelia.nix

@@ -1,19 +1,31 @@
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
-  inherit (lib) types
+  inherit (lib) types mkIf optionalString;
-    mkIf
-    optionalString;
   inherit (builtins) isNull any attrValues;
 
-  validAuthMethods = [ "normal" "basic" ];
+  validAuthMethods = [
-  getUpstreamFromInstance = instance: let
+    "normal"
+    "basic"
+  ];
+  getUpstreamFromInstance =
+    instance:
+    let
       inherit (config.services.authelia.instances.${instance}.settings) server;
       inherit (server) port;
-    host = if server.host == "0.0.0.0" then "127.0.0.1"
+      host =
+        if server.host == "0.0.0.0" then
+          "127.0.0.1"
         else if lib.hasInfix ":" server.host then
           throw "TODO IPv6 not supported in Authelia server address (hard to parse, can't tell if it is [::])."
-      else server.host;
+        else
-  in "http://${host}:${port}";
+          server.host;
+    in
+    "http://${host}:${port}";
 
   # use this when reverse proxying to authelia (and only authelia because i
   # like the nixos recommended proxy settings better)
@@ -55,7 +67,6 @@ let
     proxy_connect_timeout 360;
   '';
 
-
   autheliaLocation = ''
     internal;
 
@@ -98,14 +109,17 @@ let
 in
 {
   # authelia
-  options.services.nginx = let
+  options.services.nginx =
+    let
       mkAttrsOfSubmoduleOpt = module: lib.mkOption { type = with types; attrsOf (submodule module); };
 
       # make system config accessible from submodules
       systemConfig = config;
 
       # submodule definitions
-    vhostModule = { name, config, ... }@attrs: {
+      vhostModule =
+        { name, config, ... }@attrs:
+        {
           options = {
             locations = mkAttrsOfSubmoduleOpt (locationModule' attrs);
             authelia = {
@@ -157,15 +171,19 @@ in
             };
           };
           config = {
-        authelia.upstream = mkIf (!(isNull config.authelia.instance))
+            authelia.upstream = mkIf (!(isNull config.authelia.instance)) (
-          (getUpstreamFromInstance config.authelia.instance);
+              getUpstreamFromInstance config.authelia.instance
-        authelia.endpoint.upstream = mkIf (!(isNull config.authelia.endpoint.instance))
+            );
-          (getUpstreamFromInstance config.authelia.endpoint.instance);
+            authelia.endpoint.upstream = mkIf (!(isNull config.authelia.endpoint.instance)) (
+              getUpstreamFromInstance config.authelia.endpoint.instance
+            );
 
             # authelia nginx internal endpoints
-        locations = let
+            locations =
+              let
                 api = "${config.authelia.upstream}/api/authz/auth-request";
-        in lib.mkIf (!(isNull config.authelia.upstream)) {
+              in
+              lib.mkIf (!(isNull config.authelia.upstream)) {
                 # just setup both, they can't be accessed externally anyways.
                 "/internal/authelia/authz" = {
                   proxyPass = api;
@@ -185,9 +203,13 @@ in
           };
         };
 
-    locationModule' = vhostAttrs: { name, config, ... }: let
+      locationModule' =
+        vhostAttrs:
+        { name, config, ... }:
+        let
           vhostConfig = vhostAttrs.config;
-    in {
+        in
+        {
           options.authelia.method = lib.mkOption {
             description = ''
               Authelia authentication method to use for this location.
@@ -198,16 +220,19 @@ in
             default = vhostConfig.authelia.method;
             example = "basic";
           };
-      config = lib.mkIf (!(isNull vhostConfig.authelia.upstream)) &&
+          config =
-        (!(lib.strings.hasPrefix "/internal/authelia/" name))
+            lib.mkIf (!(isNull vhostConfig.authelia.upstream))
-      lib.mkMerge [
+            && (!(lib.strings.hasPrefix "/internal/authelia/" name)) lib.mkMerge [
-        (lib.mkIf config.authelia.method == "regular" {
+              (
+                lib.mkIf config.authelia.method == "regular" {
 
-        })
+                }
+              )
             ];
         };
 
-  in {
+    in
+    {
       virtualHosts = mkAttrsOfSubmoduleOpt vhostModule;
     };