ngl I asked gpt again, its an addiction

applications/40-authentik/authentik.yaml

@@ -1,4 +1,3 @@
----
 apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
@@ -17,7 +16,29 @@ spec:
         global:
           envFrom:
             - secretRef:
-                name: authentik-values
+                name: authentik-secret
+        authentik:
+          secret_key: "env://AUTHENTIK_SECRET_KEY"
+          postgresql:
+            password: "env://AUTHENTIK_POSTGRES_PASSWORD"
+          error_reporting:
+            enabled: true
+        server:
+          ingress:
+            enabled: true
+            hosts:
+              - auth.hxme.net
+            annotations:
+              external-dns.alpha.kubernetes.io/hostname: auth.hxme.net
+            tls:
+              - secretName: wildcard-hxme-net
+                hosts:
+                  - auth.hxme.net
+        postgresql:
+          enabled: false
+        redis:
+          enabled: false
+
   destination:
     server: "https://kubernetes.default.svc"
     namespace: home-server