Pocket ID

Pocket ID (website) provides a simple Open ID Connector based on passkeys.

Sample config

This a basic config using sops-nix (repo) to store the encryption key.

❄︎ /etc/nixos/configuration.nix

{config, ...}: {
  sops.secrets."pocket_id".owner = config.services.pocket-id.user;

  services.pocket-id = {
    enable = true;
    credentials = {
      ENCRYPTION_KEY = config.sops.secrets."pocket_id".path;
    };
    settings = {
      # <https://pocket-id.org/docs/configuration/environment-variables>
      APP_URL = "https://id.yourwebsite.com";
      TRUST_PROXY = true;
      HOST = "127.0.0.1";
      PORT = 1411;
    };
  };
}