update

dmz/authentik/templates/cert.yaml

@@ -1,3 +1,19 @@
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: auth-ingress
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`auth.durp.info`) && PathPrefix(`/`)
+      kind: Rule
+      services:
+        - name: ak-outpost-dmz-embedded-outpost
+          port: 9000
+  tls:
+    secretName: authentik-outpost-tls
+
 ---
 apiVersion: cert-manager.io/v1
 kind: Certificate
@@ -8,6 +24,6 @@ spec:
     name: vault-issuer
     kind: ClusterIssuer
   secretName: authentik-outpost-tls
-  commonName: "*"
+  commonName: "auth.durp.info"
   dnsNames:
-    - "*"
+    - "auth.durp.info"

infra/authentik/templates/ingress.yaml

@@ -15,7 +15,6 @@ spec:
     secretName: authentik-tls
 
 ---
-
 apiVersion: cert-manager.io/v1
 kind: Certificate
 metadata:
@@ -28,4 +27,3 @@ spec:
   commonName: "authentik.durp.info"
   dnsNames:
     - "authentik.durp.info"
-