fix: Reorder authelia bypass policies

nixos/mirai/services/authelia.nix

@@ -44,10 +44,6 @@
             default_policy = "one_factor";
             rules = let
               bypass_api = domain: [
-                {
-                  domain = domain;
-                  policy = "one_factor";
-                }
                 {
                   domain = domain;
                   policy = "bypass";
@@ -55,6 +51,10 @@
                     "^/api([/?].*)?$"
                   ];
                 }
+                {
+                  domain = domain;
+                  policy = "one_factor";
+                }
               ];
             in
               (bypass_api "sonarr.tsuba.darksailor.dev")

nixos/mirai/services/gitea.nix

@@ -1,4 +1,8 @@
-{config, ...}: {
+{
+  lib,
+  config,
+  ...
+}: {
   virtualisation.docker.enable = true;
   sops = {
     # secrets."gitea/registration".owner = config.systemd.services.gitea-actions-mirai.serviceConfig.User;
@@ -33,7 +37,7 @@
     gitea-actions-runner = {
       instances = {
         mirai = {
-          enable = false;
+          enable = true;
           name = "mirai";
           url = "https://git.darksailor.dev";
           labels = [
@@ -57,10 +61,6 @@
         settings = {
           access_control = {
             rules = [
-              {
-                domain = "git.darksailor.dev";
-                policy = "one_factor";
-              }
               {
                 domain = "git.darksailor.dev";
                 policy = "bypass";
@@ -68,6 +68,10 @@
                   "^/api([/?].*)?$"
                 ];
               }
+              {
+                domain = "git.darksailor.dev";
+                policy = "one_factor";
+              }
             ];
           };
         };

nixos/mirai/services/seafile.nix

@@ -50,10 +50,6 @@
         settings = {
           access_control = {
             rules = [
-              {
-                domain = "cloud.darksailor.dev";
-                policy = "one_factor";
-              }
               {
                 domain = "cloud.darksailor.dev";
                 policy = "bypass";
@@ -61,6 +57,10 @@
                   "^/(api2|seafhttp)([/?].*)?$"
                 ];
               }
+              {
+                domain = "cloud.darksailor.dev";
+                policy = "one_factor";
+              }
             ];
           };
         };