morning star

applications/stuff/authentik.yaml

@@ -25,7 +25,20 @@ spec:
 
         server:
           ingress:
-            enabled: false
+            enabled: true
+            annotations:
+              external-dns.alpha.kubernetes.io/hostname: auth.hxme.net
+            hosts:
+              - host: |
+                  auth.hxme.net
+                paths:
+                  - path: /
+                    pathType: Prefix
+            tls:
+              - hosts:
+                  - auth.hxme.net
+                secretName: wildcard-hxme-net
+
   destination:
     server: https://kubernetes.default.svc
     namespace: home-server