Move authentik off longhorn

modules/authentik.nix

@@ -26,13 +26,42 @@
           postgresql = {
             enabled = true;
             auth.password = "ref+sops://secrets.yml#/authentik/postgresql_password";
-            primary.persistence.existingClaim = "db";
+            primary = {
-            primary.extraEnvVarsSecret = "postgresql-env";
+              persistence.enabled = false;
+              extraEnvVarsSecret = "postgresql-env";
+              extraVolumes = [
+                {
+                  name = "data";
+
+                  hostPath = {
+                    path = "/mnt/longhorn/persistent/volumes/authentik-db";
+                    type = "Directory";
+                  };
+                }
+              ];
+            };
           };
 
           redis = {
             enabled = true;
-            master.persistence.existingClaim = "redis";
+            master = {
+              persistence.enabled = false;
+              extraVolumes = [
+                {
+                  name = "authentik-redis";
+                  hostPath = {
+                    path = "/mnt/longhorn/persistent/volumes/authentik-redis";
+                    type = "Directory";
+                  };
+                }
+              ];
+              extraVolumeMounts = [
+                {
+                  mountPath = "/data";
+                  name = "authentik-redis";
+                }
+              ];
+            };
           };
         };
       };
@@ -53,6 +82,9 @@
           authentik-server.spec.template.spec.containers.server.env = env;
           authentik-worker.spec.template.spec.containers.worker.env = env;
         };
+
+        statefulSets.authentik-postgresql.spec.template.spec.nodeName = "atlas";
+        statefulSets.authentik-redis-master.spec.template.spec.nodeName = "atlas";
       };
     };
 

modules/bootstrap-default.nix

@@ -85,11 +85,6 @@
     };
 
     lab = {
-      longhorn.persistentVolume = {
-        authentik-db.storage = "10Gi";
-        authentik-redis.storage = "5Gi";
-      };
-
       tailscaleIngresses.tailscale-longhorn = {
         host = "longhorn";