k8s-kaisers-info/gitops-kaisers-info/apps/templates/authentik.yaml

apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: authentik
  namespace: authentik
  finalizers:
  - resources-finalizer.argocd.argoproj.io
spec:
  destination:
    namespace: authentik
    name: {{ .Values.spec.destination.name }}
  project: {{ .Values.spec.project }}
  source:
    chart: goauthentik/authentik
    repoURL: https://charts.goauthentik.io
    targetRevision: 5.2.1
    values: |
      authentik:
        secret_key: "qlfgmSJ8GT/EoE3JsphrM81KzyYqoDYif7u59m/sVL4EQ6MO"
        # This sends anonymous usage-data, stack traces on errors and
        # performance data to sentry.beryju.org, and is fully opt-in
        error_reporting:
          enabled: true
        postgresql:
          password: "ThisIsNotASecurePasswordEither"
        
        email:
          # -- SMTP Server emails are sent from, fully optional
          host: "mail.your-server.de"
          port: 587
          # -- SMTP credentials, when left empty, not authentication will be done
          username: "authentik@kaisers.info"
          # -- SMTP credentials, when left empty, not authentication will be done
          password: "6qL3XdwQUw2UJ75U"
          # -- Enable either use_tls or use_ssl, they can't be enabled at the same time.
          use_tls: true
          # -- Enable either use_tls or use_ssl, they can't be enabled at the same time.
          use_ssl: false
          # -- Connection timeout
          timeout: 30
          # -- Email from address, can either be in the format "foo@bar.baz" or "authentik <foo@bar.baz>"
          from: "authentik <authentik@kaisers.info>"

      ingress:
        enabled: true
        hosts:
          - host: authentik.kaisers.info
            paths:
              - path: "/"
                pathType: Prefix

      postgresql:
        enabled: true
        postgresqlPassword: "ThisIsNotASecurePasswordEither"
      redis:
        enabled: true