homelab/k8s/core/authentik/values.yaml

global:
  image:
    tag: "2026.2.1"

authentik:
    error_reporting:
        enabled: true
    postgresql:
        name: "authentik"
        host: "psql.psql.svc"
        port: 5432
worker:
  envFrom:
    - secretRef:
        name: authentik-creds
# volumes:
#   - name: dshm
#     emptyDir:
#       medium: Memory
#       sizeLimit: 512Mi
# volumeMounts:
#   - name: dshm
#     mountPath: /dev/shm
# livenessProbe:
#   exec:
#     command: ["/bin/sh", "-c", "kill -0 1"]
#   initialDelaySeconds: 5
#   periodSeconds: 10
#   failureThreshold: 3
#   timeoutSeconds: 3
# readinessProbe:
#   exec:
#     command: ["/bin/sh", "-c", "kill -0 1"]
#   initialDelaySeconds: 5
#   periodSeconds: 10
#   failureThreshold: 3
#   timeoutSeconds: 3
# startupProbe:
#   exec:
#     command: ["/bin/sh", "-c", "kill -0 1"]
#   initialDelaySeconds: 30
#   periodSeconds: 10
#   failureThreshold: 60
#   timeoutSeconds: 3
server:
  envFrom:
    - secretRef:
        name: authentik-creds
  ingress:
      enabled: true
      ingressClassName: traefik
      annotations: 
        cert-manager.io/cluster-issuer: letsencrypt
        traefik.ingress.kubernetes.io/router.middlewares: kube-system-https-redirect@kubernetescrd
      hosts:
        - idm.hexor.cy
      tls:
        - secretName: idm-tls
          hosts:
            - '*.hexor.cy'
redis:
    enabled: false