Redid networking

modules/services/authelia.nix

@@ -43,7 +43,7 @@ let
     authentication_backend:
       ldap:
         implementation: "custom"
-        url: "ldap://127.0.0.1:389"
+        url: "ldap://openldap:389"
         timeout: "5s"
         start_tls: false
         base_dn: "${ldapBaseDN}"
@@ -162,7 +162,7 @@ in
     virtualisation.oci-containers.containers.authelia = {
       image = cfg.image;
 
-      # No ports mapping — --network=host shares the host network stack directly.
+      ports = [ "127.0.0.1:${toString cfg.port}:9091" ];
 
       environment = {
         TZ = homeyConfig.timezone;
@@ -184,7 +184,7 @@ in
       ];
 
       extraOptions = [
-        "--network=host"
+        "--network=homey"
         "--hostname=authelia"
       ];
     };
@@ -193,8 +193,8 @@ in
     # Systemd — wait for openldap and external HD
     # -----------------------------------------------------------------------
     systemd.services."podman-authelia" = {
-      after    = lib.mkAfter  [ "mnt-data.mount" "podman-openldap.service" ];
-      requires = lib.mkAfter  [ "mnt-data.mount" "podman-openldap.service" ];
+      after    = lib.mkAfter  [ "mnt-data.mount" "podman-openldap.service" "podman-homey-network.service" ];
+      requires = lib.mkAfter  [ "mnt-data.mount" "podman-openldap.service" "podman-homey-network.service" ];
     };
   };
 }