apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: authentik
  namespace: argocd
spec:
  destination:
    name: ''
    namespace: 'apps-fuku'
    server: "https://kubernetes.default.svc"
  sources:
    - chart: authentik
      repoURL: https://charts.goauthentik.io/
      targetRevision: 2023.10.*
      helm:
        valuesObject:
          authentik:
              secret_key: file:///authentik-creds/secret_key
              reporting_enabled: false
              email:
                host: mail.fukurokuju.dev
                port: 465
                password: file:///authentik-creds/email_password
                username: auth@fukurokuju.dev
                use_ssl: true
                timeout: 30
                from: auth@fukurokuju.dev
              postgresql:
                host: 192.168.1.13
                name: auth
                user: file:///authentik-creds/pg_username
                password: file:///authentik-creds/pg_password
              redis:
                host: 192.168.1.3
                port: 30036
                password: file:///authentik-creds/redis_password
          volumeMounts:
            - name: authentik-creds
              mountPath: /authentik-creds
            - name: media
              mountPath: /media
          volumes:
            - name: authentik-creds
              secret:
                secretName: secrets-authentik
            - name: media
              persistentVolumeClaim:
                claimName: pvc-authentik-media
          autoscaling:
            server:
              enabled: true
              maxScaling: 3
            worker:
              enabled: true
          pdb:
            server:
              enabled: true
              maxUnavailable: 2
            worker:
              enabled:
                maxUnavailable: 4
          service:
            type: LoadBalancer
            port: 9000
            name: http
          ingress:
            enabled: true
            ingressClassName: traefik
            hosts:
              - host: auth.fukurokuju.dev
                paths:
                  - path: "/"
                    pathType: Prefix
                    backend:
                      service:
                        name: http
                        port:
                          number: 9000
                tls: []
    - repoURL: https://git.roboces.dev/catalin/fukuops.git
      path: k8s/services/authentik
      targetRevision: main
  project: fuku
  syncPolicy:
    automated: { }