home-server/applications/40-authentik/authentik.yaml

60 lines
1.5 KiB
YAML

apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
name: authentik
namespace: argocd
spec:
project: default
source:
repoURL: https://charts.goauthentik.io
chart: "authentik"
targetRevision: 2025.6.4
type: helm
helm:
parameters:
- name: "authentik.postgresql.password"
valueFrom:
secretKeyRef:
name: authentik-secrets
key: postgresql-password
- name: "authentik.redis.password"
valueFrom:
secretKeyRef:
name: authentik-secrets
key: redis-password
- name: "authentik.secret_key"
valueFrom:
secretKeyRef:
name: authentik-secrets
key: secret-key
values: |
postgresql:
enabled: false
redis:
enabled: false
postgresqlConfig:
host: postgresql.database
port: 5432
database: authentik
username: authentik
redisConfig:
host: redis.database
port: <your-external-redis-port>
authentik:
external_url: "https://authentik.yourdomain.com/"
ingress:
enabled: true
hosts:
- host: authentik.hxme.net
paths:
- path: /
pathType: Prefix
destination:
server: https://kubernetes.default.svc
namespace: home-server
syncPolicy:
automated:
selfHeal: true
prune: true
syncOptions:
- CreateNamespace=true