apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: authentik
  namespace: {{ .Values.spec.namespace }}
  finalizers:
  - resources-finalizer.argocd.argoproj.io
spec:
  destination:
    namespace: authentik
    name: {{ .Values.spec.destination.name }}
  project: {{ .Values.spec.project }}
  syncPolicy:
    automated:
      prune: true
      selfHeal: true
  source:
    chart: authentik
    repoURL: https://charts.goauthentik.io
    targetRevision: 5.2.1
    helm:
      releaseName: authentik
      values: |
        authentik:
          secret_key: "qlfgmSJ8GT/EoE3JsphrM81KzyYqoDYif7u59m/sVL4EQ6MO"
          # This sends anonymous usage-data, stack traces on errors and
          # performance data to sentry.beryju.org, and is fully opt-in
          error_reporting:
            enabled: false
          postgresql:
            password: "ThisIsNotASecurePasswordEither"
          
          email:
            # -- SMTP Server emails are sent from, fully optional
            host: "mail.your-server.de"
            port: 587
            # -- SMTP credentials, when left empty, not authentication will be done
            username: "authentik@kaisers.info"
            # -- SMTP credentials, when left empty, not authentication will be done
            password: "6qL3XdwQUw2UJ75U"
            # -- Enable either use_tls or use_ssl, they can't be enabled at the same time.
            use_tls: true
            # -- Connection timeout
            timeout: 30
            # -- Email from address, can either be in the format "foo@bar.baz" or "authentik <foo@bar.baz>"
            from: "authentik <authentik@kaisers.info>"

        ingress:
          enabled: true
          annotations:
            cert-manager.io/issuer: letsencrypt-staging
          hosts:
            - host: authentik.kaisers.info
              paths:
                - path: "/"
                  pathType: Prefix
          tls:
            - hosts:
                - authentik.kaisers.info
              secretName: authentik-kaisers-info-tls

        postgresql:
          enabled: true
          postgresqlPassword: "ThisIsNotASecurePasswordEither"
        redis:
          enabled: true