cluster

commit 5eca6f073a3f7aad6c9278346e007492662b63cf
parent 790f4d500c25969b11590d3dd4b0334c6df6db03
Author: MTRNord <mtrnord1@gmail.com>
Date:   Mon, 18 Mar 2024 18:29:44 +0100

Fix AUTHENTIK_LISTEN__TRUSTED_PROXY_CIDRS

Diffstat:
M
apps/base/authentik/release.yaml
 | 
29
++++++++++++++++-------------

1 file changed, 16 insertions(+), 13 deletions(-)
diff --git a/apps/base/authentik/release.yaml b/apps/base/authentik/release.yaml
@@ -46,19 +46,22 @@ spec:
                 # -- Email from address, can either be in the format "foo@bar.baz" or "authentik <foo@bar.baz>"
                 from: ops@nordgedanken.dev
         server:
-          ingress:
-              annotations:
-                  cert-manager.io/cluster-issuer: letsencrypt-http
-              enabled: true
-              hosts:
-                  - auth.midnightthoughts.space
-              paths:
-                - /
-              pathType: Prefix
-              tls:
-                  - hosts:
-                      - auth.midnightthoughts.space
-                    secretName: auth-midnightthoughts-tls-secret
+            env:
+                - name: AUTHENTIK_LISTEN__TRUSTED_PROXY_CIDRS
+                  value: "127.0.0.0/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,fe80::/10,::1/128,10.244.0.0/24,fc00::/112,10.244.1.0/24,fc00::1:0/112,10.244.3.0/24,fc00::3:0/112"
+            ingress:
+                annotations:
+                    cert-manager.io/cluster-issuer: letsencrypt-http
+                enabled: true
+                hosts:
+                    - auth.midnightthoughts.space
+                paths:
+                  - /
+                pathType: Prefix
+                tls:
+                    - hosts:
+                        - auth.midnightthoughts.space
+                      secretName: auth-midnightthoughts-tls-secret
         postgresql:
             enabled: false
         redis: