From f81ae035dd56cea9b3a0213a2ece678566e571af Mon Sep 17 00:00:00 2001
From: Hendrik Sokolowski <hensoko@gssws.de>
Date: Sun, 29 Oct 2023 00:31:33 +0200
Subject: [PATCH] disable password reset

---
 hosts/chonk/authelia.nix | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/hosts/chonk/authelia.nix b/hosts/chonk/authelia.nix
index 14bbaffa..4932cfcb 100644
--- a/hosts/chonk/authelia.nix
+++ b/hosts/chonk/authelia.nix
@@ -7,6 +7,7 @@
   containerStateDir = "/var/lib/authelia-gssws";
   hostStateDir = "/opt/authelia";
   domain = "auth.gssws.de";
+  redirectDomain = "home.gssws.de";
   servicePort = 9091;
 in {
   age.secrets.authelia_users = {
@@ -71,16 +72,16 @@ in {
         };
 
         settings = {
-          theme = "auto";
+          theme = "dark";
           server.port = servicePort;
 
           session.domain = domain;
-          default_redirection_url = "https://home.gssws.de/";
+          default_redirection_url = "https://${redirectDomain}/";
 
           access_control.default_policy = "two_factor";
 
           authentication_backend = {
-            password_reset.disable = false;
+            password_reset.disable = true;
             file = {
               path = "/run/agenix/authelia_users";
             };
@@ -99,7 +100,8 @@ in {
           };
 
           notifier.smtp = {
-            address = "smtp://mail.gssws.de:25";
+            host = "mail.gssws.de";
+            port = 25;
             sender = "Authelia <authelia@gssws.de>";
             identifier = "auth.gssws.de";
           };