diff --git a/k8s/infra/auth/authelia/lldap-credentials.yaml b/k8s/infra/auth/authelia/lldap-credentials.yaml index a199317..86d59cd 100644 --- a/k8s/infra/auth/authelia/lldap-credentials.yaml +++ b/k8s/infra/auth/authelia/lldap-credentials.yaml @@ -1,12 +1,12 @@ apiVersion: bitnami.com/v1alpha1 kind: SealedSecret metadata: - name: lldap-auth + name: lldap-credentials namespace: authelia spec: encryptedData: - password: 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 + password: AgCFubMvDwJwG2hf8GkvYXvYdrHDqjKvqxIuf4VsFkZ4FX4v9aPjDWrbiqjdK7O8szfM3rsYa4CLIL/e30oNFkykjKUW/UvoeOCJIZFh7y4UviMbA2INsdwsZr1wAXy+/THA4dx17DndoJGE95p5mk+qaC4CJAQEBL0JEkYrqXICwsaqBEJ4A3nJyk6y6/0g5s8VIskeUGXaHa7Xt/tVLh1qCZncJtoJJDIvJgLxVXWf+VgwXcozIekNNV8g6iZT+lClTE0MN9rmKMZc2mantCMJh2gHsj9+SZQOeiZMcKghGHxRod/wBVbUVQGyOFJdthBFWUETuhpKh45G5VBPXV91fcWsbBpPYzreuu76RqtX1hGHvdZxIepvF3aj7Nxj+gq1IxBaUXeCJvNZsLJdY1RlAv4T5Yw8veLeThig1bh02rhocjRHY2HRh2ArtMEtW6gkE0GbWwrMv5lZHDKcu1pRwoT4Yo//iIkge6EkvHZWOiETOjCpKBgedYbJWOQkdr0341tfOUded9bkPm1ZOtuUMAJkF+4QeJWxzwQ37KSZsezGIeq7nQBrXja0MdOPJNi2mtkTaPZ3yyE2Jt6jfiVaZ8htoqrKcoe9sgnPL5gsaUBrgv9aVNUScC1jQcWjtYdAyn7khT17Faw163m7v8N97AeMlsqGwcgdULrrQXm21xsFTb6SJTi3HpERasINVp4P0E2aJpi1ZK0AZXf4OTdp7kC9bZopQqzx8jDzicJudg== template: metadata: - name: lldap-auth + name: lldap-credentials namespace: authelia diff --git a/k8s/infra/auth/authelia/smtp-credentials.yaml b/k8s/infra/auth/authelia/smtp-credentials.yaml index 611408c..8b4db89 100644 --- a/k8s/infra/auth/authelia/smtp-credentials.yaml +++ b/k8s/infra/auth/authelia/smtp-credentials.yaml @@ -1,12 +1,15 @@ +--- apiVersion: bitnami.com/v1alpha1 kind: SealedSecret metadata: - name: smtp-auth + creationTimestamp: null + name: smtp-credentials namespace: authelia spec: encryptedData: - password: AgDJIshuhA6VgX5xBTnqbvmoI6QEHBP0/TITotxBks+HjMMl8e/CKfBYV0PblUmXaZ5Q9NqbYFeM+4z5b7MZ/HUvWjiEIHxp7B9sjyIh1CPUXJRbdcE6zg2KaTkb2qLntb9udmQOu+CcQUtFqbcJvln5E0mHOqnmtvEBtG2vUrmSmlMJ3rCDVoWC1p0Fg+0mBfwQFIiqXwCW1l4X0BAwG4LmkNz9R/gBLs0Fh6p5CPuG0OSpnaf+pVH5Dt9+ILsmwgbi9FWTANt1JYCjHl57soy1b5RziXrtukRfuQuOBsInvHRkqka+ZmjflRZLb/LLo83TV2NXkaguhTetGLHIR1EkX9D5MEGl25VcALaDuGtIlaU9Em/fAKAN3DRsVU7J5kgsoFjRDo7l4FSbnA7r9zGO1ZSSUgxm0P7XyJjxufm8VmjaVY07kd7n8tQruyoncS+QPi7fEQpqgir2H25YWwIjZEd05s1/lzmhw/9EfMYhMN5QZXU+uJAKuvS1hZELbr5DT5MV0dErA3TvrKcVgbk7rKwXROMrieweeoFY1m+3zFRrxpxyNTd0m4B9dnjJGi50yafKQCsjlQc0dZbw4TW8W4IQrjwbEGN05BMnBAdW5aDMD5Hav8JSP4yfvNTSjTkEyORqjtf/3JHshyrxVqFzJha6UZWTz6tQl6kIwS+w2nNew9ynE0sNyZiqM7H2Vx1zT+jr99Y/Vz59qcWvia0X+fx/r7zLjrV7F9s4uI9QogLEpDIWMvRMWz+Ws+zuQ+6LaHOJKXzzy2EVjOn3+WO8VWM4iig= + password: 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 template: metadata: - name: smtp-auth + creationTimestamp: null + name: smtp-credentials namespace: authelia diff --git a/k8s/infra/auth/authelia/values.yaml b/k8s/infra/auth/authelia/values.yaml index 54de575..adc74ac 100644 --- a/k8s/infra/auth/authelia/values.yaml +++ b/k8s/infra/auth/authelia/values.yaml @@ -24,7 +24,7 @@ configMap: default_2fa_method: totp theme: dark log: - level: info + level: debug access_control: default_policy: deny @@ -50,11 +50,11 @@ configMap: notifier: smtp: enabled: true - address: submission://smtp.sendgrid.net:587 + address: smtp://smtp-relay.brevo.com:587 sender: Authelia - disable_html_emails: true - username: apikey - password: { secret_name: smtp-auth } + disable_html_emails: false + username: 93744d001@smtp-brevo.com + password: { secret_name: smtp-credentials } authentication_backend: ldap: @@ -63,7 +63,7 @@ configMap: address: ldaps://lldap.stonegarden.dev base_dn: DC=stonegarden,DC=dev user: UID=authelia,OU=people,DC=stonegarden,DC=dev - password: { secret_name: lldap-auth } + password: { secret_name: lldap-credentials } attributes: extra: argocd: { multi_valued: true, value_type: string } @@ -213,9 +213,9 @@ secret: additionalSecrets: authelia-postgres-app: items: [ { key: password, path: storage.postgres.password.txt } ] - lldap-auth: + lldap-credentials: items: [ { key: password, path: authentication.ldap.password.txt } ] - smtp-auth: + smtp-credentials: items: [ { key: password, path: notifier.smtp.password.txt } ] jwk-rsa: items: diff --git a/k8s/infra/auth/lldap/kustomization.yaml b/k8s/infra/auth/lldap/kustomization.yaml index 9422fe5..9d2212e 100644 --- a/k8s/infra/auth/lldap/kustomization.yaml +++ b/k8s/infra/auth/lldap/kustomization.yaml @@ -14,7 +14,7 @@ configMapGenerator: - LLDAP_LDAPS_OPTIONS__CERT_FILE="/cert/tls.crt" - LLDAP_LDAPS_OPTIONS__KEY_FILE="/cert/tls.key" - LLDAP_SMTP_OPTIONS__ENABLE_PASSWORD_RESET="true" - - LLDAP_SMTP_OPTIONS__SERVER="smtp.sendgrid.net" + - LLDAP_SMTP_OPTIONS__SERVER="smtp-relay.brevo.com" - LLDAP_SMTP_OPTIONS__PORT="587" - LLDAP_SMTP_OPTIONS__SMTP_ENCRYPTION="STARTTLS" - LLDAP_SMTP_OPTIONS__FROM="LLDAP " diff --git a/k8s/infra/auth/lldap/smtp-credentials.yaml b/k8s/infra/auth/lldap/smtp-credentials.yaml index 6cb94d7..ad3de15 100644 --- a/k8s/infra/auth/lldap/smtp-credentials.yaml +++ b/k8s/infra/auth/lldap/smtp-credentials.yaml @@ -5,8 +5,8 @@ metadata: namespace: lldap spec: encryptedData: - LLDAP_SMTP_OPTIONS__PASSWORD: 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 - LLDAP_SMTP_OPTIONS__USER: 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 + LLDAP_SMTP_OPTIONS__PASSWORD: AgAcgBm2mT4H/sEvkIAio1rw9Nq7fgQgvqRqVV0f4/jrLRVSgh5nfLDGHyHEFKkwF28SzyDfPcnvAsTqNSjSNfZBtBLBq53ES+ZhjmiHpQX4/n3XCguwaGAOBA5CTG0TBqpAOkbzh7FmCNvSENSzDOgEDSUQn5G5m9e1Ds6MiW/ewiTnR70NPIJld2+lFlVrfDuS9hhQRxi6ysGDCpffHfA5CLZATvqgUJQuwS9TCzvFSIyQDhI2kgfccM/Oe00LhSdzMmaXrPN6nfOUdg4RHaWTJ/0iBYuwKvAKYhVzS/5QjidLkARc4QWkTM7JI9vVG//smlmDif3YtUqxFsM+4cGjqvuaioXaE1WWMy8QL7qpw4lfTXj3YyURDZWsmUmVcD0UZ+ozFGdO9+/tGBfF68USdieC7I19deMpd9vUmdmECLg3VqZeNGPHRxsa0yWi8pHPx/YBjWCW2VJtCcvjo0wGnbf5OJiAZb5KIlZHDeLxfm4CUeyb0v1as+WWq2t+p4WWY7IeMIxTH+jUN2YzWpsqGRF5pXdOhjrHBreynNU3FBnCAQ1UUqrC5dFqK+/nZWpyuVwkTw07TrPu8h9UWhR37gEuhVoK2jRDw8rzROTHrHTPwpul45TnRo0/fk10WIyQyrHatuuk9+F5efZEDUlMpHTuYbX34RIQTgN6NCZzI/OlKN0Q1WAjDjn/iTQjfT62mO8ceZ5iqy9J4/LxLrm7Atp5OtOUAZZDb7MKLWDgLmUNK8rKUJO/YjSdYLHDBUbKYTy6KAEwYZGuqx0jN/nkx48lNM4FAe3wZOhrDgKrJxpUIar+BSMblqg= + LLDAP_SMTP_OPTIONS__USER: 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 template: metadata: name: smtp-credentials