update

dmz/authentik/templates/cert.yaml

@@ -1,3 +1,19 @@
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: auth-ingress
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`auth.durp.info`) && PathPrefix(`/`)
+      kind: Rule
+      services:
+        - name: ak-outpost-dmz-embedded-outpost
+          port: 9000
+  tls:
+    secretName: authentik-outpost-tls
+
 ---
 apiVersion: cert-manager.io/v1
 kind: Certificate
@@ -8,6 +24,6 @@ spec:
     name: vault-issuer
     kind: ClusterIssuer
   secretName: authentik-outpost-tls
-  commonName: "*"
+  commonName: "auth.durp.info"
   dnsNames:
-    - "*"
+    - "auth.durp.info"

infra/authentik/templates/ingress.yaml

@@ -6,16 +6,15 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`authentik.durp.info`) && PathPrefix(`/`) 
-    kind: Rule
-    services:
-    - name: authentik-server
-      port: 80
+    - match: Host(`authentik.durp.info`) && PathPrefix(`/`)
+      kind: Rule
+      services:
+        - name: authentik-server
+          port: 80
   tls:
     secretName: authentik-tls
 
 ---
-
 apiVersion: cert-manager.io/v1
 kind: Certificate
 metadata:
@@ -27,5 +26,4 @@ spec:
     kind: ClusterIssuer
   commonName: "authentik.durp.info"
   dnsNames:
-  - "authentik.durp.info" 
-
+    - "authentik.durp.info"