From 8a45a1d8ebf5e122b63a5c4293e95c125dfe75b6 Mon Sep 17 00:00:00 2001
From: Zoe Roux <zoe.roux@zoriya.dev>
Date: Fri, 18 Jul 2025 18:28:54 +0200
Subject: [PATCH] Move media pvc to server only

---
 apps/authentik.yaml | 14 +++++++++-----
 1 file changed, 9 insertions(+), 5 deletions(-)

diff --git a/apps/authentik.yaml b/apps/authentik.yaml
index 99f5955..37074d9 100644
--- a/apps/authentik.yaml
+++ b/apps/authentik.yaml
@@ -38,16 +38,11 @@ spec:
           volumeMounts:
             - name: postgres-cert
               mountPath: /var/postgres-ssl
-            - name: authentik-media
-              mountPath: /media
           volumes:
             - name: postgres-cert
               secret:
                 defaultMode: 0640
                 secretName: postgres-authentik
-            - name: authentik-media
-              persistentVolumeClaim:
-                claimName: media-pvc
           securityContext:
             fsGroup: 1001
             runAsUser: 1001
@@ -58,6 +53,15 @@ spec:
             ingressClassName: cilium
             hosts:
               - authentik.sdg.moe
+            annotations:
+              cert-manager.io/cluster-issuer: letsencrypt
+          volumeMounts:
+            - name: authentik-media
+              mountPath: /media
+          volumes:
+            - name: authentik-media
+              persistentVolumeClaim:
+                claimName: media-pvc
 
         redis:
           enabled: true