homelab/manifests/authentik-public-ingress.yaml

31 lines
670 B
YAML

# authentik public ingress
# Apply: kubectl apply -f manifests/authentik-public-ingress.yaml
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: authentik-public-tls
namespace: authentik
spec:
secretName: authentik-public-tls
issuerRef:
name: letsencrypt-prod
kind: ClusterIssuer
dnsNames:
- auth.nik4nao.com
---
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
name: authentik-public
namespace: authentik
spec:
entryPoints:
- websecure
routes:
- match: Host(`auth.nik4nao.com`)
kind: Rule
services:
- name: authentik-server
port: 80
tls:
secretName: authentik-public-tls