apiVersion: v1
kind: ConfigMap
metadata:
  name: authelia
data:
  X_AUTHELIA_CONFIG: /config/configuration.yml,/config/configuration_oidc.yml
  X_AUTHELIA_CONFIG_FILTERS: template
  AUTHELIA_AUTHENTICATION_BACKEND_FILE_PATH: /config/users.yml
  AUTHELIA_STORAGE_LOCAL_PATH: /data/db.sqlite3
---
apiVersion: v1
kind: Pod
metadata:
  name: authelia
  labels:
    traefik.enable: true
    traefik.http.routers.authelia.tls: true
    traefik.http.routers.authelia.tls.certresolver: le
    traefik.http.routers.authelia.entrypoints: http,https
    traefik.http.routers.authelia.rule: Host(`login.gzr.im`)
    traefik.http.routers.authelia.service: authelia
    traefik.http.routers.authelia.middlewares: tls-redirect@file
    traefik.http.services.authelia.loadbalancer.server.port: 9091
    # metrics
    traefik.http.routers.authelia-metrics.entrypoints: metrics
    traefik.http.routers.authelia-metrics.rule: Path(`/metrics/authelia`)
    traefik.http.routers.authelia-metrics.service: authelia-metrics
    traefik.http.routers.authelia-metrics.middlewares: replacepath-metrics@file
    traefik.http.services.authelia-metrics.loadbalancer.server.port: 9959
spec:
  restartPolicy: Never
  dnsPolicy: Default
  imagePullPolicy: Always
  containers:
    - name: authelia
      image: ghcr.io/authelia/authelia:${version}
      envFrom:
        - configMapRef:
            name: authelia
        - secretRef:
            name: authelia
      ports:
        - containerPort: 9091
          protocol: TCP
        - containerPort: 9959
          protocol: TCP
      volumeMounts:
        - name: config
          mountPath: /config
        - name: data
          mountPath: /data
        - name: notifier
          mountPath: /notifier
      livenessProbe:
        exec:
          command:
            - /app/healthcheck.sh
        initialDelaySeconds: 3
      resources:
        requests:
          cpu: 50m
          memory: 30Mi
        limits:
          cpu: 100m
          memory: 250Mi

  volumes:
    - name: config
      hostPath:
        path: /var/lib/authelia/config
        type: DirectoryOrCreate
    - name: data
      hostPath:
        path: /var/lib/authelia/data
        type: DirectoryOrCreate
    - name: notifier # TODO
      emptyDir: {}