Add passkey auth

2026-08-09 05:06:20 +10:00 · 2025-08-09 16:20:52 +10:00
parent 36acb4c339
commit 348accbd39
1 changed files with 110 additions and 0 deletions
@@ -0,0 +1,110 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: passkey-auth
+  namespace: argocd
+spec:
+  project: default
+  source:
+    chart: passkey-auth
+    repoURL: https://wahyd4.github.io/passkey-auth
+    path: passkey-auth
+    targetRevision: 0.1.2
+    helm:
+      releaseName: passkey-auth
+      values: |
+        autoscaling:
+          enabled: false
+          maxReplicas: 1
+          minReplicas: 1
+          targetCPUUtilizationPercentage: 70
+        config:
+          auth:
+            allowedEmails:
+            - hi@junv.cc
+            - wahyd4@gmail.com
+            cookieDomain: .junv.cc
+            requireApproval: true
+          cors:
+            allowedOrigins:
+            - https://*.junv.cc
+          webauthn:
+            rpDisplayName: Junv's Home Passkey Auth
+            rpId: pass.junv.cc
+            rpOrigins:
+            - https://pass.junv.cc
+        env:
+        - name: DEFAULT_EMAIL
+          value: hi@junv.cc
+        - name: CONFIG_PATH
+          value: /app/config.yaml
+        - name: ADMIN_EMAIL
+          value: hi@junv.cc
+        healthCheck:
+          enabled: true
+          livenessProbe:
+            failureThreshold: 3
+            initialDelaySeconds: 30
+            periodSeconds: 30
+            timeoutSeconds: 10
+          readinessProbe:
+            failureThreshold: 3
+            initialDelaySeconds: 10
+            periodSeconds: 10
+            timeoutSeconds: 5
+        image:
+          pullPolicy: Always
+          repository: ghcr.io/wahyd4/passkey-auth
+          tag: main
+        imagePullSecrets: {}
+        ingress:
+          annotations:
+            cert-manager.io/cluster-issuer: letsencrypt-prod
+          className: nginx
+          enabled: true
+          hosts:
+          - host: pass.junv.cc
+            paths:
+            - path: /
+              pathType: Prefix
+          tls:
+          - hosts:
+            - pass.junv.cc
+            secretName: pass-junv-cc-tls
+        nodeSelector:
+          kubernetes.io/os: linux
+        persistence:
+          accessMode: ReadWriteOnce
+          enabled: true
+          size: 2Gi
+          storageClass: nfs-client
+        podSecurityContext:
+          fsGroup: 1000
+          runAsNonRoot: true
+          seccompProfile:
+            type: RuntimeDefault
+        replicaCount: 1
+        resources:
+          limits:
+            cpu: 500m
+            memory: 1Gi
+          requests:
+            cpu: 200m
+            memory: 256Mi
+        secrets:
+          existingSecret: passkey-auth-secrets
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          readOnlyRootFilesystem: false
+          runAsNonRoot: true
+          runAsUser: 1000
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: nginx-ingress
+  syncPolicy:
+     automated:
+       prune: true
+       selfHeal: true