.

clanServices/zitadel/default.nix

@@ -34,6 +34,14 @@ in
             The Name of the zitadel organisation
           '';
         };
+
+        emergencyAccessPublicKey = mkOption {
+          type = types.str;
+          example = "ssh-ed25519 ...";
+          description = ''
+            The public key with which you want access to
+          '';
+        };
       };
     };
 
@@ -130,7 +138,7 @@ in
               SMTPConfiguration = {
                 SMTP = {
                   Host = "black-mail.nl:587";
-                  User = "chris@kruining.eu";
+                  User = "info@amarth.cloud";
                   Password = ""; #config.clan.core.vars.generators.zitadel.files.emailPassword.value;
                 };
                 FromName = "Amarth Zitadel";
@@ -151,6 +159,26 @@ in
                 SSL.Mode = "disable";
               };
             };
+
+            Machine.Identification = {
+              PrivateIp.Enabled = true;
+
+              # In the docs this uses a google service. I want a self hosted one
+              # TODO :: Figure out how to self-host webhooks, if I want them at all
+              Webhook.Enabled = false;
+            };
+
+            SystemAPIUsers = {
+              emergencyAccess = {
+                # Path = settings.emergencyAccessPublicKey;
+                KeyData = settings.emergencyAccessPublicKey;
+
+                # This is the default value
+                # Memberships = [
+                #   { MemberType = "System"; Roles = [ "SYSTEM_OWNER" ]; }
+                # ];
+              };
+            };
           };
 
           steps.FirstInstance = {