homelab/authentik.yml

@@ -3,8 +3,6 @@ authentik:
     # performance data to sentry.io, and is fully opt-in
     error_reporting:
         enabled: false
-env:
-  AUTHENTIK_WORKER__CONCURRENCY: "2"
 envValueFrom:
   AUTHENTIK_SECRET_KEY:
     secretKeyRef:

homelab/freshrss-config.yml

@@ -1,12 +0,0 @@
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: freshrss-config
-data:
-  CRON_MIN: "*/15"
-  # OIDC_ENABLED: "1"
-  OIDC_PROVIDER_METADATA_URL: https://authentik.gmem.ca/application/o/freshrss/.well-known/openid-configuration
-  OIDC_REMOTE_USER_CLAIM: preferred_username
-  OIDC_CLIENT_ID: WSZI1tVeDE5FhC6XF3nbmjNh3UhCcpNXll7Zf4bJ
-  OIDC_SCOPES: "openid profile"
-  OIDC_X_FORWARDED_HEADERS: X-Forwarded-Host X-Forwarded-Port X-Forwarded-Proto

homelab/freshrss.yaml

@@ -17,15 +17,13 @@ spec:
         image: freshrss/freshrss:arm
         resources:
           limits:
-            memory: "256Mi"
+            memory: "128Mi"
             cpu: "500m"
         ports:
         - containerPort: 80
-        envFrom:
-          - configMapRef:
-              name: freshrss-config
-          - secretRef:
-              name: freshrss-secrets
+        env:
+          - name: CRON_MIN
+            value: 1,31
         volumeMounts:
         - name: data
           mountPath: /var/www/FreshRSS/data