WiP

stages/base/kustomize/csi-driver-nfs.yaml

@@ -10,4 +10,6 @@ parameters:
   share: /mnt/nas
 reclaimPolicy: Delete
 volumeBindingMode: Immediate
-allowVolumeExpansion: true
+allowVolumeExpansion: true
+mountOptions:
+  - nfsvers=4.1

stages/identity/helmfile.yaml

@@ -9,4 +9,3 @@ releases:
     version: 2024.12.3
     values:
       - ./values/authentik.values.yaml.gotmpl
-    installed: false

stages/identity/values/authentik.values.yaml.gotmpl

@@ -1,7 +1,14 @@
 postgresql:
+  image:
+    debug: true
   enabled: true
   auth:
     password: {{ readFile "../.envs/.authentik-postgresql" }}
+  resources:
+    limits:
+      hugepages-2Mi: "512Mi"
+  volumePermissions:
+    enabled: true
 
 authentik:
   secret_key: {{ readFile "../.envs/.authentik-secret-key" }}
@@ -11,18 +18,18 @@ authentik:
 
 redis:
   enabled: true
-
+# 
-server:
+# server:
-  ingress:
+#   ingress:
-    ingressClassName: nginx
+#     ingressClassName: nginx
-    enabled: true
+#     enabled: true
-    hosts:
+#     hosts:
-      - idp.kropcloud.net
+#       - idp.kropcloud.net
-    annotations:
+#     annotations:
-      nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
+#       nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
-      nginx.ingress.kubernetes.io/backend-protocol: "HTTP"
+#       nginx.ingress.kubernetes.io/backend-protocol: "HTTP"
-      cert-manager.io/cluster-issuer: cloudflare-issuer
+#       cert-manager.io/cluster-issuer: cloudflare-issuer
-    tls:
+#     tls:
-      - hosts: 
+#       - hosts: 
-        - idp.kropcloud.net
+#         - idp.kropcloud.net
-        secretName: authentik-tls
+#         secretName: authentik-tls