k8s-kaisers-info/services-kaisers-info/templates/authentik.yaml

apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: "authentik"
  namespace: {{ .Values.spec.namespace }}
  finalizers:
  - resources-finalizer.argocd.argoproj.io
spec:
  destination:
    namespace: "authentik"
    name: {{ .Values.spec.destination.name }}
  project: {{ .Values.spec.project }}
  syncPolicy:
    automated:
      prune: true
      selfHeal: true
  source:
    chart: "authentik"
    repoURL: "https://charts.goauthentik.io"
    targetRevision: "5.2.1"
    helm:
      releaseName: "authentik"
      values: |
        authentik:
          secret_key: "qlfgmSJ8GT/EoE3JsphrM81KzyYqoDYif7u59m/sVL4EQ6MO"
          # This sends anonymous usage-data, stack traces on errors and
          # performance data to sentry.beryju.org, and is fully opt-in
          error_reporting:
            enabled: false
          postgresql:
            password: "ThisIsNotASecurePasswordEither"
          
          email:
            # -- SMTP Server emails are sent from, fully optional
            host: "mail.your-server.de"
            port: 587
            # -- SMTP credentials, when left empty, not authentication will be done
            username: "authentik@kaisers.info"
            # -- SMTP credentials, when left empty, not authentication will be done
            password: "6qL3XdwQUw2UJ75U"
            # -- Enable either use_tls or use_ssl, they can't be enabled at the same time.
            use_tls: true
            # -- Connection timeout
            timeout: 30
            # -- Email from address, can either be in the format "foo@bar.baz" or "authentik <foo@bar.baz>"
            from: "authentik <authentik@kaisers.info>"

        ingress:
          enabled: true
          annotations:
            cert-manager.io/cluster-issuer: "letsencrypt-prod"
            traefik.ingress.kubernetes.io/redirect-entry-point: "https"
          hosts:
            - host: "authentik.kaisers.info"
              paths:
                - path: "/"
                  pathType: "Prefix"
          tls:
            - secretName: "authentik-kaisers-info-tls"
              hosts:
                - "authentik.kaisers.info"
              

        postgresql:
          enabled: true
          postgresqlPassword: "ThisIsNotASecurePasswordEither"
        redis:
          enabled: true