@@ -56,7 +56,6 @@ cifs-paperless.file = ../../secrets/cifs-paperless.age;
     forgejo-actions-runner.file = ../../secrets/forgejo-actions-runner.age;
     ntfy.file = ../../secrets/ntfy.age;
     pocket-id.file = ../../secrets/pocket-id.age;
-    rauthy.file = ../../secrets/rauthy.age;
     readeck.file = ../../secrets/readeck.age;
   };
 
@@ -631,8 +630,7 @@ '';
         };
         "iam.alin.ovh" = {
           extraConfig = ''
-            encode zstd gzip
-            reverse_proxy http://127.0.0.1:8080
+            redir https://id.alin.ovh{uri} permanent
           '';
         };
         "files.${domain}" = {
@@ -929,72 +927,6 @@ environmentFile = config.age.secrets.pocket-id.path;
     settings = {
       APP_URL = "https://id.alin.ovh";
       TRUST_PROXY = true;
-    };
-  };
-
-  users.groups.rauthy = { };
-  users.users.rauthy = {
-    isSystemUser = true;
-    createHome = true;
-    home = "/srv/rauthy";
-    group = "rauthy";
-  };
-  virtualisation.oci-containers = {
-    backend = "podman";
-    containers = {
-      rauthy =
-        let
-          domain = "alin.ovh";
-          toml = pkgs.formats.toml { };
-          cfg = {
-            bootstrap = {
-              admin_email = "admin@${domain}";
-            };
-            cluster = {
-              node_id = 1;
-              wal_ignore_lock = true;
-            };
-            encryption = {
-              keys = [ "4babe063/HXY+N6xpGNaCZ5QsfIJB7jJscqmZfy/9UrGc3V2Kyi8=" ];
-              key_active = "9f93e3c7";
-            };
-            email = {
-              smtp_url = "host.containers.internal";
-              smtp_port = 587;
-              smtp_from = "Rauthy <rauthy@${domain}>";
-              smtp_username = "rauthy";
-              smtp_password = "rauthy";
-              smtp_danger_insecure = true;
-            };
-            server = {
-              scheme = "http";
-              pub_url = "iam.${domain}";
-              proxy_mode = true;
-              trusted_proxies = [
-                "10.0.0.0/8"
-              ];
-            };
-            webauthn = {
-              rp_id = domain;
-              rp_origin = "https://iam.${domain}:443";
-            };
-          };
-        in
-        {
-          image = "ghcr.io/sebadob/rauthy:0.32.6";
-          ports = [ "8080:8080" ];
-          user = "971:969";
-          volumes = [
-            "${toml.generate "config.toml" cfg}:/app/config.toml"
-            "/srv/rauthy:/app/data"
-          ];
-          environment = {
-            SMTP_URL = "host.containers.internal";
-            SMTP_DANGER_INSECURE = "true";
-          };
-          environmentFiles = [ config.age.secrets.rauthy.path ];
-          serviceName = "rauthy";
-        };
     };
   };