feat: enhance Authentik deployment with age-encrypted secrets; change deployment to komodo
This commit is contained in:
parent
c3689404bd
commit
71736f8dd9
9 changed files with 254 additions and 369 deletions
17
env/common.env
vendored
17
env/common.env
vendored
|
|
@ -1,18 +1,17 @@
|
|||
# Deployment identity
|
||||
DEPLOYMENT_ENVIRONMENT=prod
|
||||
COMPOSE_PROJECT_NAME=sso-s1q-dev
|
||||
PUBLIC_DOMAIN=sso.s1q.dev
|
||||
TLS_DOMAIN=*.s1q.dev
|
||||
|
||||
# Explicit image versions. Update these values through Git.
|
||||
AUTHENTIK_TAG=2025.8.1
|
||||
POSTGRES_TAG=17.6-alpine
|
||||
REDIS_TAG=8.0-alpine
|
||||
GEOIPUPDATE_TAG=v7.1.1
|
||||
|
||||
# Authentik logging and error reporting
|
||||
AUTHENTIK_ERROR_REPORTING__ENABLED=true
|
||||
AUTHENTIK_LOG_LEVEL=warning
|
||||
AUTHENTIK_ERROR_REPORTING__ENABLED=false
|
||||
AUTHENTIK_LOG_LEVEL=info
|
||||
|
||||
# Authentik database configuration
|
||||
AUTHENTIK_POSTGRESQL__HOST=sbx0db00.int.s1q.dev
|
||||
AUTHENTIK_POSTGRESQL__PORT=5432
|
||||
AUTHENTIK_POSTGRESQL__SSLMODE=verify-full
|
||||
AUTHENTIK_POSTGRESQL__SSLROOTCERT=/etc/ssl/certs/ca-certificates.crt
|
||||
|
||||
# Email
|
||||
AUTHENTIK_EMAIL__HOST=mail.s1q.dev
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue