remove authentik
This commit is contained in:
parent
26c0bdeda6
commit
557f735a79
|
@ -1,17 +0,0 @@
|
||||||
apiVersion: external-secrets.io/v1beta1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: authentik
|
|
||||||
namespace: authentik
|
|
||||||
spec:
|
|
||||||
refreshInterval: "5m"
|
|
||||||
secretStoreRef:
|
|
||||||
name: vault
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
target:
|
|
||||||
name: authentik
|
|
||||||
data:
|
|
||||||
- secretKey: secret_key
|
|
||||||
remoteRef:
|
|
||||||
key: authentik/authentik
|
|
||||||
property: secret_key
|
|
|
@ -1,47 +0,0 @@
|
||||||
apiVersion: helm.toolkit.fluxcd.io/v2beta1
|
|
||||||
kind: HelmRelease
|
|
||||||
metadata:
|
|
||||||
name: authentik
|
|
||||||
namespace: authentik
|
|
||||||
spec:
|
|
||||||
interval: 1m0s
|
|
||||||
chart:
|
|
||||||
spec:
|
|
||||||
# renovate: registryUrl=https://charts.goauthentik.io
|
|
||||||
chart: authentik
|
|
||||||
version: 2022.7.3
|
|
||||||
sourceRef:
|
|
||||||
kind: HelmRepository
|
|
||||||
name: authentik-charts
|
|
||||||
namespace: flux-system
|
|
||||||
interval: 5m
|
|
||||||
valuesFrom:
|
|
||||||
- kind: Secret
|
|
||||||
name: authentik
|
|
||||||
valuesKey: secret_key
|
|
||||||
targetPath: authentik.secret_key
|
|
||||||
optional: false
|
|
||||||
values:
|
|
||||||
image:
|
|
||||||
repository: ghcr.io/goauthentik/server
|
|
||||||
tag: 2022.7.3
|
|
||||||
authentik:
|
|
||||||
error_reporting:
|
|
||||||
enabled: true
|
|
||||||
postgresql:
|
|
||||||
host: "database.olympus"
|
|
||||||
name: "authentik"
|
|
||||||
user: "authentik"
|
|
||||||
redis:
|
|
||||||
enabled: true
|
|
||||||
architecture: standalone
|
|
||||||
auth:
|
|
||||||
enabled: false
|
|
||||||
ingress:
|
|
||||||
enabled: true
|
|
||||||
ingressClassName: "traefik"
|
|
||||||
hosts:
|
|
||||||
- host: id.0x76.dev
|
|
||||||
paths:
|
|
||||||
- path: "/"
|
|
||||||
pathType: Prefix
|
|
|
@ -1,5 +0,0 @@
|
||||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
||||||
kind: Kustomization
|
|
||||||
resources:
|
|
||||||
- external-secret.yaml
|
|
||||||
- helm-release.yaml
|
|
|
@ -3,7 +3,6 @@ kind: Kustomization
|
||||||
resources:
|
resources:
|
||||||
- networking
|
- networking
|
||||||
- presidential-paradise
|
- presidential-paradise
|
||||||
- authentik
|
|
||||||
- gitops
|
- gitops
|
||||||
- monitoring
|
- monitoring
|
||||||
- olympus
|
- olympus
|
||||||
|
|
|
@ -1,10 +0,0 @@
|
||||||
---
|
|
||||||
apiVersion: source.toolkit.fluxcd.io/v1beta1
|
|
||||||
kind: HelmRepository
|
|
||||||
metadata:
|
|
||||||
name: authentik-charts
|
|
||||||
namespace: flux-system
|
|
||||||
spec:
|
|
||||||
interval: 15m
|
|
||||||
url: https://charts.goauthentik.io/
|
|
||||||
timeout: 3m
|
|
|
@ -4,6 +4,5 @@ resources:
|
||||||
- metallb-charts.yaml
|
- metallb-charts.yaml
|
||||||
- traefik-charts.yaml
|
- traefik-charts.yaml
|
||||||
- external-secrets-charts.yaml
|
- external-secrets-charts.yaml
|
||||||
- authentik-charts.yaml
|
|
||||||
- fairwinds-charts.yaml
|
- fairwinds-charts.yaml
|
||||||
- drone-charts.yaml
|
- drone-charts.yaml
|
||||||
|
|
|
@ -1,7 +0,0 @@
|
||||||
---
|
|
||||||
apiVersion: v1
|
|
||||||
kind: Namespace
|
|
||||||
metadata:
|
|
||||||
name: authentik
|
|
||||||
labels:
|
|
||||||
goldilocks.fairwinds.com/enabled: "true"
|
|
|
@ -4,7 +4,6 @@ resources:
|
||||||
- presidential-paradise.yaml
|
- presidential-paradise.yaml
|
||||||
- networking.yaml
|
- networking.yaml
|
||||||
- external-secrets.yaml
|
- external-secrets.yaml
|
||||||
- authentik.yaml
|
|
||||||
- gitops.yaml
|
- gitops.yaml
|
||||||
- monitoring.yaml
|
- monitoring.yaml
|
||||||
- olympus.yaml
|
- olympus.yaml
|
||||||
|
|
|
@ -4,7 +4,7 @@
|
||||||
|
|
||||||
{ config, pkgs, ... }:
|
{ config, pkgs, ... }:
|
||||||
let
|
let
|
||||||
databases = [ "authentik" "umami" "drone" ];
|
databases = [ "umami" "drone" ];
|
||||||
in
|
in
|
||||||
{
|
{
|
||||||
imports = [ ];
|
imports = [ ];
|
||||||
|
|
|
@ -76,20 +76,6 @@ in
|
||||||
secretKey = "$MINIO_SECRET_KEY";
|
secretKey = "$MINIO_SECRET_KEY";
|
||||||
};
|
};
|
||||||
email = true;
|
email = true;
|
||||||
# Disable until fixed
|
|
||||||
# oauth2 = let url = "https://id.0x76.dev"; in
|
|
||||||
# {
|
|
||||||
# providerName = "authentik";
|
|
||||||
# clientID = "$AUTHENTIK_CLIENTID";
|
|
||||||
# clientSecret = "$AUTHENTIK_CLIENTSECRET";
|
|
||||||
# scope = "openid email profile";
|
|
||||||
# userProfileURL = "${url}/application/o/userinfo/";
|
|
||||||
# tokenURL = "${url}/application/o/token/";
|
|
||||||
# authorizationURL = "${url}/application/o/authorize/";
|
|
||||||
# userProfileUsernameAttr = "preferred_username";
|
|
||||||
# userProfileDisplayNameAttr = "name";
|
|
||||||
# userProfileEmailAttr = "email";
|
|
||||||
# };
|
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
|
|
@ -121,5 +121,19 @@
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
|
xdg.userDirs = let home = config.home.homeDirectory; in
|
||||||
|
{
|
||||||
|
enable = true;
|
||||||
|
createDirectories = true;
|
||||||
|
desktop = "${home}/.desktop";
|
||||||
|
documents = "${home}/cloud/Documents";
|
||||||
|
download = "${home}/dl";
|
||||||
|
music = "${home}/cloud/Music";
|
||||||
|
pictures = "${home}/cloud/Pictures";
|
||||||
|
publicShare = "${home}/.publicShare";
|
||||||
|
templates = "${home}/.templates";
|
||||||
|
videos = "${home}/cloud/Videos";
|
||||||
|
};
|
||||||
|
|
||||||
services.syncthing.enable = true;
|
services.syncthing.enable = true;
|
||||||
}
|
}
|
||||||
|
|
Loading…
Reference in a new issue