authentik:

  replicas: 1
  priorityClassName:
  securityContext: {}

  worker:
    replicas: 1
    priorityClassName:
    securityContext: {}

  image:
    repository: registry.durp.info/goauthentik/server
    pullPolicy: Always

  ingress:
    enabled: false
    ingressClassName: "traefik"
    annotations: 
      cert-manager.io/cluster-issuer: letsencrypt-production
    labels: {}
    hosts:
      - host: authentik.durp.info
        paths:
          - path: "/"
            pathType: Prefix
    tls: 
      - secretName: authentik-tls
        hosts:
          - authentik.durp.info
 

  authentik:
    log_level: info
    geoip: /geoip/GeoLite2-City.mmdb
    avatars: gravatar
    email:
      host: ""
      port: 587
      username: ""
      password: ""
      use_tls: false
      use_ssl: false
      timeout: 30
      from: ""
    outposts:
      container_image_base: registry.durp.info/goauthentik/%(type)s:%(version)s
    error_reporting:
      enabled: false
      environment: "k8s"
      send_pii: false
    postgresql:
      host: '{{ .Release.Name }}-postgresql'
      name: "authentik"
      user: "authentik"
      port: 5432
      s3_backup:
        access_key: ""
        secret_key: ""
        bucket: ""
        region: ""
        host: ""
        location: ""
        insecure_skip_verify: false

  blueprints: []

  env: {}

  envFrom: []

  envValueFrom: 
    AUTHENTIK_POSTGRESQL__PASSWORD:
      secretKeyRef:
        name: db-pass
        key: dbpass
    AUTHENTIK_SECRET_KEY:
      secretKeyRef:
        name: db-pass
        key: secretkey

  service:
    enabled: true
    type: ClusterIP
    port: 80
    name: http
    protocol: TCP
    labels: {}
    annotations: {}

  volumes: []

  volumeMounts: []

  affinity: {}

  tolerations: []

  nodeSelector: {}

  resources:
    server: {}
    worker: {}

  livenessProbe:
    enabled: true
    httpGet:
      path: /-/health/live/
      port: http
    initialDelaySeconds: 50
    periodSeconds: 10

  readinessProbe:
    enabled: true
    httpGet:
      path: /-/health/ready/
      port: http
    initialDelaySeconds: 50
    periodSeconds: 10

  serviceAccount:
    create: true

  prometheus:
    serviceMonitor:
      create: false
      interval: 30s
      scrapeTimeout: 3s
    rules:
      create: false

  geoip:
    enabled: false
    accountId: ""
    licenseKey: ""
    editionIds: "GeoLite2-City"
    image: maxmindinc/geoipupdate:v4.8
    # -- number of hours between update runs
    updateInterval: 8

  postgresql:
    enabled: true
    postgresqlUsername: "authentik"
    postgresqlDatabase: "authentik"
    existingSecret: authentik-postgresql1
    persistence:
      enabled: true
      storageClass: longhorn
      accessModes:
        - ReadWriteMany
  redis:
    enabled: true
    image:
      registry: registry.durp.info
      repository: bitnami/redis
      pullPolicy: Always
    architecture: standalone
    auth:
      enabled: false