Kratos service

[philocalyst]

Things done

I added some core abstractions on top of the general configuration options!

They are:

• A structured secrets file attribute for the various methods of storing secrets with Kratos -- as a runtime overlay to avoid the nix store for these sensitive bits

• A eensie URL abstraction to avoid public, admin, etc.

• The common createLocally abstraction for the database, which makes it easy to keep it contained.

• Built on platform:

  • x86_64-linux
  • aarch64-linux
  • x86_64-darwin
  • aarch64-darwin

• Tested, as applicable:

  • NixOS tests in nixos/tests.
  • Package tests at passthru.tests.
  • Tests in lib/tests or pkgs/test for functions and "core" functionality.

• Ran nixpkgs-review on this PR. See nixpkgs-review usage.

• Tested basic functionality of all binary files, usually in ./result/bin/.

• Nixpkgs Release Notes

  • Package update: when the change is major or breaking.

• NixOS Release Notes

  • Module addition: when adding a new NixOS module.
  • Module update: when the change is significant.

• Fits CONTRIBUTING.md, pkgs/README.md, maintainers/README.md and other READMEs.