nixos-hypervisor/services/authentik/default.nix

{
  inputs,
  config,
  lib,
  authentik-nix,
  ...
}: let
  cfg = config.services.vm_authentik;
in {
  options.services.vm_authentik = {
    enable = lib.mkEnableOption "Enable minimal config";
  };
  config = lib.mkIf cfg.enable {
    networking = {
      firewall.allowedTCPPorts = [9000 9300 9443];
    };
  };
}