tinyauth

2026-10-20 10:20:11 +03:00
parent a29ecfdfa6
commit a243ccccdb
8 changed files with 153 additions and 1 deletions
@@ -0,0 +1,74 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: tinyauth
+  namespace: auth
+spec:
+  interval: 10m
+  chartRef:
+    kind: OCIRepository
+    name: tinyauth
+  driftDetection:
+    mode: enabled
+  values:
+    controllers:
+      tinyauth:
+        containers:
+          app:
+            image:
+              repository: ghcr.io/tinyauthapp/tinyauth
+              tag: v5.2.0
+            env:
+              TZ: Europe/Moscow
+              TINYAUTH_APPURL: https://login.aggtaa.com
+              TINYAUTH_UI_TITLE: "Welcome"
+              TINYAUTH_AUTH_USERSFILE: /config/users
+              TINYAUTH_AUTH_SECURECOOKIE: "true"
+              TINYAUTH_LABELPROVIDER: none
+              TINYAUTH_ANALYTICS_ENABLED: "false"
+              TINYAUTH_DATABASE_DRIVER: memory
+            probes:
+              liveness:
+                enabled: true
+              readiness:
+                enabled: true
+            resources:
+              requests:
+                cpu: 20m
+                memory: 64Mi
+              limits:
+                memory: 256Mi
+
+    service:
+      app:
+        controller: tinyauth
+        ports:
+          http:
+            port: 3000
+
+    ingress:
+      app:
+        className: traefik
+        annotations:
+          cert-manager.io/cluster-issuer: letsencrypt-prod
+        hosts:
+          - host: login.aggtaa.com
+            paths:
+              - path: /
+                pathType: Prefix
+                service:
+                  identifier: app
+                  port: http
+        tls:
+          - secretName: tinyauth-tls
+            hosts:
+              - login.aggtaa.com
+
+    persistence:
+      users:
+        type: secret
+        name: tinyauth-secrets
+        globalMounts:
+          - path: /config/users
+            subPath: users
+            readOnly: true