state(dbaas): update encrypted state

This commit is contained in:
Viktor Barzin 2026-05-10 21:00:00 +00:00
parent 5582977e1a
commit 2db8bdac0d
9 changed files with 1672 additions and 1628 deletions

View file

@ -228,8 +228,11 @@ resource "kubernetes_service" "navidrome" {
}
}
module "ingress" {
source = "../../modules/kubernetes/ingress_factory"
auth = "required"
source = "../../modules/kubernetes/ingress_factory"
# Subsonic API at /rest/* is consumed by mobile clients (DSub, Symfonium,
# play:sub) which can't follow Authentik forward-auth 302s. Navidrome's
# own user/password auth still gates everything.
auth = "none"
dns_type = "proxied"
namespace = kubernetes_namespace.navidrome.metadata[0].name
name = "navidrome"