add authentik

This commit is contained in:
2025-02-16 17:28:09 -06:00
parent 37fdb0a1ac
commit 95bfaf4a70
3 changed files with 67 additions and 46 deletions

View File

@@ -1,42 +1,42 @@
apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
name: authentik-ingress
spec:
entryPoints:
- websecure
routes:
- match: Host(`authentik.durp.info`) && PathPrefix(`/`)
kind: Rule
services:
- name: authentik-server
port: 80
tls:
secretName: authentik-tls
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: authentik-tls
spec:
secretName: authentik-tls
issuerRef:
name: letsencrypt-production
kind: ClusterIssuer
commonName: "authentik.durp.info"
dnsNames:
- "authentik.durp.info"
---
kind: Service
apiVersion: v1
metadata:
name: authentik-external-dns
annotations:
external-dns.alpha.kubernetes.io/hostname: authentik.durp.info
spec:
type: ExternalName
externalName: durp.info
#apiVersion: traefik.containo.us/v1alpha1
#kind: IngressRoute
#metadata:
# name: authentik-ingress
#spec:
# entryPoints:
# - websecure
# routes:
# - match: Host(`authentik.durp.info`) && PathPrefix(`/`)
# kind: Rule
# services:
# - name: authentik-server
# port: 80
# tls:
# secretName: authentik-tls
#
#---
#
#apiVersion: cert-manager.io/v1
#kind: Certificate
#metadata:
# name: authentik-tls
#spec:
# secretName: authentik-tls
# issuerRef:
# name: letsencrypt-production
# kind: ClusterIssuer
# commonName: "authentik.durp.info"
# dnsNames:
# - "authentik.durp.info"
#
#---
#
#kind: Service
#apiVersion: v1
#metadata:
# name: authentik-external-dns
# annotations:
# external-dns.alpha.kubernetes.io/hostname: authentik.durp.info
#spec:
# type: ExternalName
# externalName: durp.info

View File

@@ -11,18 +11,18 @@ spec:
data:
- secretKey: dbpass
remoteRef:
key: secrets/authentik/database
key: kv/authentik/database
property: dbpass
- secretKey: secretkey
remoteRef:
key: secrets/authentik/database
key: kv/authentik/database
property: secretkey
- secretKey: postgresql-postgres-password
remoteRef:
key: secrets/authentik/database
key: kv/authentik/database
property: dbpass
- secretKey: postgresql-password
remoteRef:
key: secrets/authentik/database
key: kv/authentik/database
property: dbpass