add oidc crypto key

This commit is contained in:
2024-05-27 18:20:29 -05:00
parent eb92c6a8a3
commit 06d077335b
3 changed files with 17 additions and 4 deletions

View File

@@ -1,9 +1,14 @@
apiVersion: v2 apiVersion: v2
name: freshrss name: freshrss
version: 1.0.0 version: 1.0.0
description: FreshRss deployment
keywords:
- rss
sources: sources:
- https://github.com/FreshRSS/FreshRSS - https://github.com/FreshRSS/FreshRSS
- https://github.com/alexlebens/helm-charts/tree/main/charts/hfreshrss - https://github.com/alexlebens/helm-charts/tree/main/charts/hfreshrss
maintainers:
- name: alexlebens
dependencies: dependencies:
- name: app-template - name: app-template
alias: freshrss alias: freshrss
@@ -17,4 +22,5 @@ dependencies:
alias: postgres-16-cluster alias: postgres-16-cluster
version: 3.1.0 version: 3.1.0
repository: http://alexlebens.github.io/helm-charts repository: http://alexlebens.github.io/helm-charts
icon: https://avatars.githubusercontent.com/u/9414285?s=48&v=4
appVersion: "1.23.1" appVersion: "1.23.1"

View File

@@ -28,6 +28,13 @@ spec:
key: /authentik/oidc/freshrss key: /authentik/oidc/freshrss
metadataPolicy: None metadataPolicy: None
property: secret property: secret
- secretKey: OIDC_CLIENT_CRYPTO_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /authentik/oidc/freshrss
metadataPolicy: None
property: crypto-key
--- ---
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1beta1

View File

@@ -25,7 +25,7 @@ freshrss:
- name: OIDC_ENABLED - name: OIDC_ENABLED
value: 1 value: 1
- name: OIDC_PROVIDER_METADATA_URL - name: OIDC_PROVIDER_METADATA_URL
value: https://authentik.alexlebens.net/application/o/freshrss/.well-known/openid-configuration value: https://auth.alexlebens.dev/application/o/freshrss/.well-known/openid-configuration
- name: OIDC_X_FORWARDED_HEADERS - name: OIDC_X_FORWARDED_HEADERS
value: X-Forwarded-Port X-Forwarded-Proto X-Forwarded-Host value: X-Forwarded-Port X-Forwarded-Proto X-Forwarded-Host
- name: OIDC_SCOPES - name: OIDC_SCOPES