From dadad31e871214afa85188da4b3e08c99df89147 Mon Sep 17 00:00:00 2001 From: "azykov@mail.ru" Date: Tue, 21 Jul 2026 20:44:04 +0300 Subject: [PATCH] authelia --- clusters/base/apps/authelia/helmrelease.yaml | 68 +++++++++++++++++++ .../base/apps/authelia/helmrepository.yaml | 10 +++ .../base/apps/authelia/kustomization.yaml | 8 +++ clusters/base/apps/authelia/middleware.yaml | 14 ++++ clusters/base/apps/authelia/secret.enc.yaml | 23 +++++++ clusters/base/namespaces/auth.yaml | 4 ++ clusters/home/apps/authelia.yaml | 21 ++++++ clusters/home/apps/kustomization.yaml | 1 + clusters/home/namespaces/kustomization.yaml | 1 + 9 files changed, 150 insertions(+) create mode 100644 clusters/base/apps/authelia/helmrelease.yaml create mode 100644 clusters/base/apps/authelia/helmrepository.yaml create mode 100644 clusters/base/apps/authelia/kustomization.yaml create mode 100644 clusters/base/apps/authelia/middleware.yaml create mode 100644 clusters/base/apps/authelia/secret.enc.yaml create mode 100644 clusters/base/namespaces/auth.yaml create mode 100644 clusters/home/apps/authelia.yaml diff --git a/clusters/base/apps/authelia/helmrelease.yaml b/clusters/base/apps/authelia/helmrelease.yaml new file mode 100644 index 0000000..043ce55 --- /dev/null +++ b/clusters/base/apps/authelia/helmrelease.yaml @@ -0,0 +1,68 @@ +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: authelia + namespace: auth +spec: + interval: 10m + chartRef: + kind: OCIRepository + name: authelia + values: + controllers: + auth: + containers: + app: + image: + repository: authelia/authelia + tag: latest + probes: + liveness: + enabled: true + readiness: + enabled: true + + service: + app: + controller: auth + ports: + http: + port: 9091 + + ingress: + app: + className: traefik + annotations: + cert-manager.io/cluster-issuer: letsencrypt-prod + hosts: + - host: auth.aggtaa.com + paths: + - path: / + pathType: Prefix + service: + identifier: app + port: http + tls: + - secretName: auth-tls + hosts: + - auth.aggtaa.com + + persistence: + config: + type: secret + name: authelia-secrets + globalMounts: + - path: /config/configuration.yml + subPath: configuration.yml + readOnly: true + - path: /config/users_database.yml + subPath: users_database.yml + readOnly: true + db: + type: persistentVolumeClaim + accessMode: ReadWriteOnce + size: 1Gi + storageClass: longhorn + retain: true + globalMounts: + - path: /db diff --git a/clusters/base/apps/authelia/helmrepository.yaml b/clusters/base/apps/authelia/helmrepository.yaml new file mode 100644 index 0000000..8f565de --- /dev/null +++ b/clusters/base/apps/authelia/helmrepository.yaml @@ -0,0 +1,10 @@ +apiVersion: source.toolkit.fluxcd.io/v1 +kind: OCIRepository +metadata: + name: authelia + namespace: auth +spec: + interval: 1h + url: oci://ghcr.io/bjw-s-labs/helm/app-template + ref: + tag: "5.0.1" diff --git a/clusters/base/apps/authelia/kustomization.yaml b/clusters/base/apps/authelia/kustomization.yaml new file mode 100644 index 0000000..b0b74c3 --- /dev/null +++ b/clusters/base/apps/authelia/kustomization.yaml @@ -0,0 +1,8 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +resources: + - helmrepository.yaml + - helmrelease.yaml + - middleware.yaml + - secret.enc.yaml + \ No newline at end of file diff --git a/clusters/base/apps/authelia/middleware.yaml b/clusters/base/apps/authelia/middleware.yaml new file mode 100644 index 0000000..8d8cb32 --- /dev/null +++ b/clusters/base/apps/authelia/middleware.yaml @@ -0,0 +1,14 @@ +apiVersion: traefik.io/v1alpha1 +kind: Middleware +metadata: + name: authelia + namespace: auth +spec: + forwardAuth: + address: http://authelia.authelia.svc.cluster.local:9091/api/verify?rd=https://auth.aggtaa.com + trustForwardHeader: true + authResponseHeaders: + - Remote-User + - Remote-Groups + - Remote-Name + - Remote-Email \ No newline at end of file diff --git a/clusters/base/apps/authelia/secret.enc.yaml b/clusters/base/apps/authelia/secret.enc.yaml new file mode 100644 index 0000000..a46c4f1 --- /dev/null +++ b/clusters/base/apps/authelia/secret.enc.yaml @@ -0,0 +1,23 @@ +apiVersion: v1 +kind: Secret +metadata: + name: authelia-secrets + namespace: auth +stringData: + configuration.yml: ENC[AES256_GCM,data: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,iv:nVWJlANSqOJvuEiURtgvfo5pprk3duYUcPLLmsnMyMI=,tag:78NIXCXRVdz5mm/wRdmB4w==,type:str] + users_database.yml: ENC[AES256_GCM,data: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,iv:SCniRgcuPn4qyuflSsqQKkz45JBIyMq0fAJTdMUz5ng=,tag:2wCM499czXObwmB+GGSQ2w==,type:str] +sops: + age: + - enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwV3JjTFNKek9UeTI1U0FW + TGVqL1hyNDFqbnlBSW1makowbGpST0Y0K2dVCmtRM29rU3JBZVVKVlBCMVdFQXMz + UGd2Sk10QjJPQ1JSSHR3akttcjZ2MFEKLS0tICtzSTdXdXVXTDZyNzJGZG9XUUJx + Qk9aSitMaGlGbHo2WFRLNVZjQVg0R28KuV8d9JbBGsn9sE90l9mAu+KlNzSplhq+ + 1/uYxmAevN1zaD/C0wfGE/f50heK9jGi203hN9ri/3cfRdJg019NZQ== + -----END AGE ENCRYPTED FILE----- + recipient: age14x4jjs2fwdgw28g2pkr6jyj2yzmwc544xwmaaglrxwz5e99seutqtr8jv5 + encrypted_regex: ^(data|stringData)$ + lastmodified: "2026-07-21T14:01:51Z" + mac: ENC[AES256_GCM,data:eSPLpEdFMNGijXT6aZjOkHaBeJYilWz+qcAd2toHqxos8SiGqGqEIaoebdZ4WcZf8fXY/2+krk6xB9D1LWyxtOBdLhOVgyEHfHIb2Y5VaCbhRBM2P274u9XoYWyxRaq9TaSJzuRKYx0AfBZQcfVP5TnFU2t9CdMwFwLdVDhXaxs=,iv:9NCbopDMS0ntRUyRMt2C9qVzhoPE34vsfblO4reAAcI=,tag:loaxDgsn9aVM09ULTmrGoA==,type:str] + version: 3.13.2 diff --git a/clusters/base/namespaces/auth.yaml b/clusters/base/namespaces/auth.yaml new file mode 100644 index 0000000..6b34cab --- /dev/null +++ b/clusters/base/namespaces/auth.yaml @@ -0,0 +1,4 @@ +apiVersion: v1 +kind: Namespace +metadata: + name: auth diff --git a/clusters/home/apps/authelia.yaml b/clusters/home/apps/authelia.yaml new file mode 100644 index 0000000..8d777ca --- /dev/null +++ b/clusters/home/apps/authelia.yaml @@ -0,0 +1,21 @@ +apiVersion: kustomize.toolkit.fluxcd.io/v1 +kind: Kustomization +metadata: + name: auth + namespace: flux-system +spec: + interval: 10m + sourceRef: + kind: GitRepository + name: flux-system + path: ./clusters/base/apps/auth + prune: true + wait: true + dependsOn: + - name: namespaces + - name: infra + retryInterval: 5s + decryption: + provider: sops + secretRef: + name: sops-age diff --git a/clusters/home/apps/kustomization.yaml b/clusters/home/apps/kustomization.yaml index 7b39097..e82be45 100644 --- a/clusters/home/apps/kustomization.yaml +++ b/clusters/home/apps/kustomization.yaml @@ -4,3 +4,4 @@ resources: - vaultwarden.yaml - zigbee2mqtt.yaml - radicale.yaml + - authelia.yaml diff --git a/clusters/home/namespaces/kustomization.yaml b/clusters/home/namespaces/kustomization.yaml index 848e088..e45868c 100644 --- a/clusters/home/namespaces/kustomization.yaml +++ b/clusters/home/namespaces/kustomization.yaml @@ -5,3 +5,4 @@ resources: - ../../base/namespaces/zigbee2mqtt.yaml - ../../base/namespaces/pim.yaml - ../../base/namespaces/longhorn-system.yaml + - ../../base/namespaces/auth.yaml