From 2cc4ff9cb184f23e14160d968d27f8c588552301 Mon Sep 17 00:00:00 2001
From: Zoe Roux <zoe.roux@zoriya.dev>
Date: Fri, 18 Jul 2025 09:22:12 +0200
Subject: [PATCH] Set verify full for authentik

---
 apps/authentik.yaml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/apps/authentik.yaml b/apps/authentik.yaml
index 0cbf611..5727d5a 100644
--- a/apps/authentik.yaml
+++ b/apps/authentik.yaml
@@ -25,8 +25,10 @@ spec:
           postgresql:
             host: postgres-cluster-rw.postgres
 
-        server:
+        global:
           env:
+            - name: AUTHENTIK_POSTGRESQL__SSLMODE
+              value: verify-full
             - name: AUTHENTIK_POSTGRESQL__SSLCERT
               value: /var/postgres-ssl/tls.crt
             - name: AUTHENTIK_POSTGRESQL__SSLKEY
@@ -43,6 +45,7 @@ spec:
             fsGroup: 1001
             runAsUser: 1001
 
+        server:
           ingress:
             enabled: true
             ingressClassName: cilium