LB

apps/templates/authentik.yaml

@@ -62,3 +62,22 @@ spec:
       selfHeal: true
     syncOptions:
       - CreateNamespace=true
+---
+apiVersion: traefik.containo.us/v1alpha1
+kind: IngressRoute
+metadata:
+  name: authentik-traefik
+  namespace: authentik
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - kind: Rule
+      match: Host("authentik.roxedus.com")
+      services:
+        - name: authentik-server
+          port: 9443
+          scheme: https
+          serversTransport: selfsigned
+  tls:
+    certResolver: cloudflare

apps/templates/traefik.yaml

@@ -126,3 +126,12 @@ spec:
       selfHeal: true
     syncOptions:
       - CreateNamespace=true
+---
+apiVersion: traefik.containo.us/v1alpha1
+kind: ServersTransport
+metadata:
+  name: selfsigned
+  namespace: traefik
+
+spec:
+  insecureSkipVerify: true