82bb179bc2
* root: make global email settings configurable * stages/email: add use_global_settings * stages/email: add test_email command to test email sending * stages/email: update email template * stages/email: simplify email template path * stages/email: add support for user-supplied email templates * stages/email: add tests for sending and templates * stages/email: only add custom template if permissions are correct * docs: add custom email template docs * root: add /templates volume in docker-compose by default * stages/email: fix form not allowing custom templates * stages/email: use relative path for custom templates * stages/email: check if all templates exist on startup, reset * docs: add global email docs for docker-compose * helm: add email config to helm chart * helm: load all secrets with env prefix * helm: move s3 and smtp secret to secret * stages/email: fix test for relative name * stages/email: add argument to send email from existing stage * stages/email: set uid using slug of message id * stages/email: ensure template validation ignores migration runs * docs: add email troubleshooting docs * stages/email: fix long task_name breaking task list
38 lines
3.5 KiB
Markdown
38 lines
3.5 KiB
Markdown
# authentik Helm Chart
|
|
|
|
| Name | Default | Description |
|
|
|-----------------------------------|-------------------------|-------------|
|
|
| image.name | beryju/authentik | Image used to run the authentik server and worker |
|
|
| image.name_static | beryju/authentik-static | Image used to run the authentik static server (CSS and JS Files) |
|
|
| image.tag | 0.14.2-stable | Image tag |
|
|
| image.pullPolicy | IfNotPresent | Image Pull Policy used for all deployments |
|
|
| serverReplicas | 1 | Replicas for the Server deployment |
|
|
| workerReplicas | 1 | Replicas for the Worker deployment |
|
|
| kubernetesIntegration | true | Enable/disable the Kubernetes integration for authentik. This will create a service account for authentik to create and update outposts in authentik |
|
|
| config.secretKey | | Secret key used to sign session cookies, generate with `pwgen 50 1` for example. |
|
|
| config.errorReporting.enabled | false | Enable/disable error reporting |
|
|
| config.errorReporting.environment | customer | Environment sent with the error reporting |
|
|
| config.errorReporting.sendPii | false | Whether to send Personally-identifiable data with the error reporting |
|
|
| config.logLevel | warning | Log level of authentik |
|
|
| config.email.host | localhost | SMTP Host Emails are sent to |
|
|
| config.email.port | 25 | SMTP Port Emails are sent to |
|
|
| config.email.username | | SMTP Username |
|
|
| config.email.password | | SMTP Password |
|
|
| config.email.use_tls | false | Enable StartTLS |
|
|
| config.email.use_ssl | false | Enable SSL |
|
|
| config.email.timeout | 10 | SMTP Timeout |
|
|
| config.email.from | authentik@localhost | Email address authentik will send from, should have a correct @domain |
|
|
| backup.accessKey | | Optionally enable S3 Backup, Access Key |
|
|
| backup.secretKey | | Optionally enable S3 Backup, Secret Key |
|
|
| backup.bucket | | Optionally enable S3 Backup, Bucket |
|
|
| backup.region | | Optionally enable S3 Backup, Region |
|
|
| backup.host | | Optionally enable S3 Backup, to custom Endpoint like minio |
|
|
| ingress.annotations | {} | Annotations for the ingress object |
|
|
| ingress.hosts | [authentik.k8s.local] | Hosts which the ingress will match |
|
|
| ingress.tls | [] | TLS Configuration, same as Ingress objects |
|
|
| install.postgresql | true | Enables/disables the packaged PostgreSQL Chart
|
|
| install.redis | true | Enables/disables the packaged Redis Chart
|
|
| postgresql.postgresqlPassword | | Password used for PostgreSQL, generated automatically.
|
|
|
|
For more info, see https://goauthentik.io/ and https://goauthentik.io/docs/installation/kubernetes/
|