From c91baa1499e28eeda0dfac5790fc978af6831a2d Mon Sep 17 00:00:00 2001
From: alexlebens <alexanderlebens@gmail.com>
Date: Fri, 16 Aug 2024 15:54:25 -0500
Subject: [PATCH] add tailscale ingress

---
 .../platform/authentik/templates/ingress.yaml | 26 +++++++++++++++++++
 .../cl01tl/platform/authentik/values.yaml     |  2 --
 2 files changed, 26 insertions(+), 2 deletions(-)
 create mode 100644 clusters/cl01tl/platform/authentik/templates/ingress.yaml

diff --git a/clusters/cl01tl/platform/authentik/templates/ingress.yaml b/clusters/cl01tl/platform/authentik/templates/ingress.yaml
new file mode 100644
index 000000000..7ccf9072e
--- /dev/null
+++ b/clusters/cl01tl/platform/authentik/templates/ingress.yaml
@@ -0,0 +1,26 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: authentik-cl01tl-authentik-server
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: authentik-cl01tl-authentik-server
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/version: {{ .Chart.AppVersion }}
+    app.kubernetes.io/component: tailscale
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  ingressClassName: tailscale
+  tls:
+    - hosts:
+        - auth-cl01tl
+  rules:
+    - http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: authentik-server
+                port:
+                  name: http
diff --git a/clusters/cl01tl/platform/authentik/values.yaml b/clusters/cl01tl/platform/authentik/values.yaml
index 7a64f139b..a7231c4ea 100644
--- a/clusters/cl01tl/platform/authentik/values.yaml
+++ b/clusters/cl01tl/platform/authentik/values.yaml
@@ -49,12 +49,10 @@ authentik:
         cert-manager.io/cluster-issuer: letsencrypt-issuer
       ingressClassName: traefik
       hosts:
-        - auth.alexlebens.net
         - authentik.alexlebens.net
       tls:
         - secretName: authentik-secret-tls
           hosts:
-            - auth.alexlebens.net
             - authentik.alexlebens.net
   worker:
     name: worker