Moritz Graf
ea6fa7344d
- Migrate OpenClaw primary model to z-ai/glm-5.3-flash across conductor, heartbeat, subagents, and vision - Configure deepseek-v4.1-flash and qwen3.8-flash as fallback models; retire claude-3.7-sonnet and deepseek-v4-pro - Decouple heartbeat target to prevent active session context amplification and token bleed - Add Garmin Connect MCP integration, secret unpacking, and Elite Strength Coach SOUL protocol - Add ADR 0001 documenting hybrid tool search and subagent architecture - Update Authentik configuration, theme styles, and Terraform state - Add Grafana dashboard for Taupi fan monitoring and update Velero secrets - Bump knowledge-wiki submodule pointer
65 lines
1.5 KiB
YAML
65 lines
1.5 KiB
YAML
# --- Authentik Helm Configuration ---
|
|
# Uses CloudNative-PG cluster (authentik-db) for PostgreSQL
|
|
|
|
global:
|
|
env:
|
|
- name: AUTHENTIK_POSTGRESQL__HOST
|
|
value: "authentik-db-rw.auth.svc.cluster.local"
|
|
- name: AUTHENTIK_POSTGRESQL__NAME
|
|
value: "authentik"
|
|
- name: AUTHENTIK_POSTGRESQL__USER
|
|
value: "authentik"
|
|
- name: AUTHENTIK_POSTGRESQL__PASSWORD
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: authentik-db-app
|
|
key: password
|
|
- name: AUTHENTIK_SESSION__DURATION
|
|
value: "days=30"
|
|
|
|
authentik:
|
|
# Secret key for cookie signing and session encryption
|
|
secret_key: "gU2ohe8eighaiph4quaeCh1ieM3iechoh2ohNg5yahz6eephoh"
|
|
error_reporting:
|
|
enabled: false
|
|
log_level: info
|
|
|
|
server:
|
|
replicas: 1
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 512Mi
|
|
limits:
|
|
memory: 1536Mi
|
|
|
|
ingress:
|
|
enabled: true
|
|
ingressClassName: "traefik"
|
|
annotations:
|
|
kubernetes.io/ingress.class: "traefik"
|
|
cert-manager.io/cluster-issuer: "letsencrypt-prod"
|
|
kubernetes.io/tls-acme: "true"
|
|
nginx.ingress.kubernetes.io/ssl-redirect: "true"
|
|
nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
|
|
nginx.ingress.kubernetes.io/proxy-body-size: "0"
|
|
hosts:
|
|
- auth.haumdaucher.de
|
|
tls:
|
|
- hosts:
|
|
- auth.haumdaucher.de
|
|
secretName: auth-haumdaucher-de
|
|
|
|
worker:
|
|
replicas: 1
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 384Mi
|
|
limits:
|
|
memory: 768Mi
|
|
|
|
# Disable bundled subchart databases (managed by CNPG)
|
|
postgresql:
|
|
enabled: false
|