home-server/applications/40-authentik/authentik.yaml

apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: authentik
  namespace: argocd
spec:
  project: default
  source:
    repoURL: https://charts.goauthentik.io
    chart: "authentik"
    targetRevision: 2025.6.4
    type: helm
    helm:
      values: |
        postgresql:
          enabled: false
        redis:
          enabled: false
        postgresqlConfig:
          host: postgresql.database
          port: 5432
          database: authentik
          username: authentik
          existingSecret: authentik-secrets
          existingSecretKey: postgresql-password
        redisConfig:
          host: redis.database
          port: <your-external-redis-port>
          existingSecret: authentik-secrets
          existingSecretKey: redis-password
        authentik:
          secret_key_existing_secret: authentik-secrets
          secret_key_existing_secret_key: secret-key
          external_url: "https://authentik.yourdomain.com/"
          ingress:
            enabled: true
            hosts:
              - host: authentik.hxme.net
                paths:
                  - path: /
                    pathType: Prefix
  destination:
    server: https://kubernetes.default.svc
    namespace: home-server
  syncPolicy:
    automated:
      selfHeal: true
      prune: true
    syncOptions:
      - CreateNamespace=true