add authentik

clusters/cl01tl/platform/authentik/templates/ingress.yaml

@@ -1,26 +1,22 @@
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
-  name: authentik-local
+  name: authentik-tailscale
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: authentik-local
+    app.kubernetes.io/name: authentik-tailscale
     app.kubernetes.io/instance: {{ .Release.Name }}
     app.kubernetes.io/version: {{ .Chart.AppVersion }}
     app.kubernetes.io/component: web
     app.kubernetes.io/part-of: {{ .Release.Name }}
-  annotations:
-    traefik.ingress.kubernetes.io/router.entrypoints: websecure
-    traefik.ingress.kubernetes.io/router.tls: "true"
-    cert-manager.io/cluster-issuer: letsencrypt-issuer
 spec:
-  ingressClassName: traefik
+  ingressClassName: tailscale
   tls:
     - hosts:
-        - authentik.alexlebens.net
+        - auth-cl01tl
-      secretName: authentik-tls-secret
+      secretName: auth-cl01tl
   rules:
-    - host: authentik.alexlebens.net
+    - host: auth-cl01tl
       http:
         paths:
           - path: /

clusters/cl01tl/platform/authentik/values.yaml

@@ -43,17 +43,15 @@ authentik:
         enabled: true
     ingress:
       enabled: true
-      ingressClassName: tailscale
+      ingressClassName: traefik
-      annotations:
-        tailscale.com/experimental-forward-cluster-traffic-via-ingress: "true"
       hosts:
-        - auth-cl01tl
+        - authentik.alexlebens.net
       paths:
         - /
       tls:
-        - secretName: auth-cl01tl
+        - secretName: authentik-tls-secret
           hosts:
-            - auth-cl01tl
+            - authentik.alexlebens.net
   worker:
     name: worker
     replicas: 1
@@ -76,8 +74,8 @@ postgres-17-cluster:
     monitoring:
       enabled: true
   backup:
-    enabled: true
+    enabled: false
     endpointURL: https://nyc3.digitaloceanspaces.com
     destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/authentik/authentik-postgresql-17-cluster
     endpointCredentials: authentik-postgresql-17-cluster-backup-secret
-    backupIndex: 1
+    backupIndex: 2