Add private

applications/40-authentik/authentik.yaml

@@ -25,11 +25,19 @@ spec:
         authentik:
           ingress:
             enabled: true
+            annotations:
+              external-dns.alpha.kubernetes.io/hostname: auth.hxme.net
+              nginx.ingress.kubernetes.io/server-snippet: |
+                add_header Strict-Transport-Security "max-age=15552000; includeSubDomains" always;
             hosts:
               - host: auth.hxme.net
                 paths:
                   - path: /
                     pathType: Prefix
+            tls:
+              - hosts:
+                  - auth.hxme.net
+                secretName: wildcard-hxme-net
   destination:
     server: https://kubernetes.default.svc
     namespace: home-server

applications/80-private/private.yaml

@@ -0,0 +1,23 @@
+---
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: home-server-private
+  namespace: argocd
+spec:
+  project: default
+  source:
+    repoURL: https://repobase.net/j/home-server-private.git
+    path: .
+    targetRevision: HEAD
+    kustomize:
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: home-server-private
+  syncPolicy:
+    automated:
+      selfHeal: true
+      prune: true
+    syncOptions:
+      - CreateNamespace=true
+

deploy/server.yaml

@@ -49,6 +49,11 @@ spec:
             namespace: home-server
             wave: 8
 
+          - name: deploy-private
+            path: applications/80-private
+            namespace: home-server-private
+            wave: 9
+
   template:
     metadata:
       name: "{{.name}}"