From 52a40cdaf8f66ac73047fc4625efba18884a37e2 Mon Sep 17 00:00:00 2001
From: j <repobase@j7b.net>
Date: Sat, 16 Aug 2025 23:37:57 +0000
Subject: [PATCH] database secrets outside of env

---
 applications/40-authentik/authentik.yaml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/applications/40-authentik/authentik.yaml b/applications/40-authentik/authentik.yaml
index ae5de7c..1f42c38 100644
--- a/applications/40-authentik/authentik.yaml
+++ b/applications/40-authentik/authentik.yaml
@@ -23,6 +23,15 @@ spec:
             password: "env://AUTHENTIK_POSTGRES_PASSWORD"
           error_reporting:
             enabled: true
+
+        database:
+          host: postgresql.database
+          existingSecret: authentik-db-credentials
+          secretKeys:
+            username: POSTGRES_USER
+            password: POSTGRES_PASSWORD
+            name: POSTGRES_DB
+
         server:
           ingress:
             enabled: true