apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: authelia
spec:
  chart:
    spec:
      chart: authelia
      reconcileStrategy: ChartVersion
      sourceRef:
        kind: HelmRepository
        name: authelia
      version: 0.9.9
  interval: 15m
  values:
    ingress:
      enabled: true
      tls:
        enabled: true
        secret: ${domain//./-}-tls
      traefikCRD:
        enabled: true
        entryPoints:
          - websecure

    secret:
      additionalSecrets:
        authelia-db-cluster-app:
          key: authelia-db-cluster-app

    configMap:
      authentication_backend:
        ldap:
          enabled: true
          implementation: custom
          address: ldap://lldap.lldap.svc.cluster.local:3890
          base_dn: dc=huizinga,dc=dev
          additional_users_dn: ou=people
          users_filter: "(&({username_attribute}={input})(objectClass=person))"
          additional_groups_dn: ou=groups
          groups_filter: "(member={dn})"
          attributes:
            display_name: displayName
            username: uid
            group_name: cn
            mail: mail
          user: uid=authelia,ou=people,dc=huizinga,dc=dev
          password:
            value: "JustATest"

      session:
        cookies:
          - subdomain: login${subdomain}
            domain: ${topdomain}
        redis:
          enabled: true
          host: dragonflydb.authelia

      storage:
        postgres:
          enabled: true
          address: tcp://authelia-db-cluster-rw.authelia:5432
          database: app
          username: app
          password:
            secret_name: authelia-db-cluster-app
            path: password

      notifier:
        filesystem:
          enabled: true