feat(slskd): make available on external + add sso

lucas-dclrcq · Feb 19, 2025 · 1c02725 · 1c02725
1 parent 5716c55
commit 1c02725
Showing 1 changed file with 18 additions and 13 deletions.
diff --git a/kubernetes/apps/downloads/lidarr/app/helmrelease.yaml b/kubernetes/apps/downloads/lidarr/app/helmrelease.yaml
@@ -76,19 +76,24 @@ spec:
             port: 8686
 
     ingress:
-      app:
-        className: internal
-        hosts:
-          - host: &host "{{ .Release.Name }}.${LIMITED_DOMAIN}"
-            paths:
-              - path: /
-                service:
-                  identifier: app
-                  port: http
-        tls:
-          - hosts:
-              - *host
-            secretName: "${LIMITED_DOMAIN/./-}-production-tls"
+      className: external
+      annotations:
+        external-dns.alpha.kubernetes.io/target: external.${SECRET_DOMAIN}
+        nginx.ingress.kubernetes.io/auth-url: |-
+          http://ak-outpost-oauth2-proxy-outpost.auth.svc.cluster.local:9000/outpost.goauthentik.io/auth/nginx
+        nginx.ingress.kubernetes.io/auth-signin: |-
+          https://lidarr.${SECRET_DOMAIN}/outpost.goauthentik.io/start?rd=$escaped_request_uri
+        nginx.ingress.kubernetes.io/auth-response-headers: |-
+          Set-Cookie,X-authentik-username,X-authentik-groups,X-authentik-email,X-authentik-name,X-authentik-uid,authorization
+        nginx.ingress.kubernetes.io/auth-snippet: |-
+          proxy_set_header X-Forwarded-Host $http_host;
+      hosts:
+        - host: "{{ .Release.Name }}.${SECRET_DOMAIN}"
+          paths:
+            - path: /
+              service:
+                identifier: app
+                port: http
 
     persistence:
       config: