Compare commits

..

2 commits

Author SHA1 Message Date
Gabriel Simmer cb21b98997
Authentik worker concurrency to 2
All checks were successful
Lint / lint (push) Successful in 25s
2023-10-30 15:58:37 +00:00
Gabriel Simmer c6ce64ea1d
Groundwork for OIDC with FreshRSS
It's broken on ARM though
2023-10-30 15:58:16 +00:00
3 changed files with 20 additions and 4 deletions

View file

@ -3,6 +3,8 @@ authentik:
# performance data to sentry.io, and is fully opt-in
error_reporting:
enabled: false
env:
AUTHENTIK_WORKER__CONCURRENCY: "2"
envValueFrom:
AUTHENTIK_SECRET_KEY:
secretKeyRef:

View file

@ -0,0 +1,12 @@
apiVersion: v1
kind: ConfigMap
metadata:
name: freshrss-config
data:
CRON_MIN: "*/15"
# OIDC_ENABLED: "1"
OIDC_PROVIDER_METADATA_URL: https://authentik.gmem.ca/application/o/freshrss/.well-known/openid-configuration
OIDC_REMOTE_USER_CLAIM: preferred_username
OIDC_CLIENT_ID: WSZI1tVeDE5FhC6XF3nbmjNh3UhCcpNXll7Zf4bJ
OIDC_SCOPES: "openid profile"
OIDC_X_FORWARDED_HEADERS: X-Forwarded-Host X-Forwarded-Port X-Forwarded-Proto

View file

@ -17,13 +17,15 @@ spec:
image: freshrss/freshrss:arm
resources:
limits:
memory: "128Mi"
memory: "256Mi"
cpu: "500m"
ports:
- containerPort: 80
env:
- name: CRON_MIN
value: 1,31
envFrom:
- configMapRef:
name: freshrss-config
- secretRef:
name: freshrss-secrets
volumeMounts:
- name: data
mountPath: /var/www/FreshRSS/data