Add auto auth to navidrome

This commit is contained in:
Nikolai Rodionov 2024-09-18 15:41:56 +02:00
parent 8eec7a3ae3
commit f8444da081
Signed by: allanger
GPG Key ID: 0AA46A90E25592AD
2 changed files with 19 additions and 4 deletions

View File

@ -99,6 +99,7 @@ releases:
version: 0.1.0 version: 0.1.0
inherit: inherit:
- template: default-env-values - template: default-env-values
- template: ext-traefik-middleware
- name: grafana - name: grafana
chart: grafana/grafana chart: grafana/grafana
namespace: applications namespace: applications

View File

@ -1,16 +1,23 @@
--- middleware:
enabled: true
middlewares:
- name: navidromeauth
spec:
headers:
customRequestHeaders:
Remote-User: "guest"
shortcuts: shortcuts:
hostname: music.badhouseplants.net hostname: music.badhouseplants.net
ingress: ingress:
main: main:
annotations: annotations:
traefik.ingress.kubernetes.io/router.middlewares: applications-navidromeauth@kubernetescrd
kubernetes.io/ingress.class: traefik kubernetes.io/ingress.class: traefik
kubernetes.io/tls-acme: "true" kubernetes.io/tls-acme: "true"
kubernetes.io/ingress.allow-http: "false" kubernetes.io/ingress.allow-http: "false"
kubernetes.io/ingress.global-static-ip-name: "" kubernetes.io/ingress.global-static-ip-name: ""
cert-manager.io/cluster-issuer: badhouseplants-issuer-http01 cert-manager.io/cluster-issuer: badhouseplants-issuer-http01
traefik.ingress.kubernetes.io/router.entrypoints: web,websecure traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
env: env:
main: main:
enabled: true enabled: true
@ -21,7 +28,14 @@ env:
ND_DATAFOLDER: /app/data ND_DATAFOLDER: /app/data
ND_LOGLEVEL: info ND_LOGLEVEL: info
ND_BASEURL: 'https://{{ .Values.shortcuts.hostname }}' ND_BASEURL: 'https://{{ .Values.shortcuts.hostname }}'
ND_REVERSEPROXYUSERHEADER: "Remote-User"
ND_REVERSEPROXYWHITELIST: "0.0.0.0/0"
ND_LASTFM_ENABLED: false
ND_LISTENBRAINZ_ENABLED: false
ND_ENABLEUSEREDITING: false
ND_ENABLEFAVOURITES: false
ND_ENABLESTARRATING: false
ND_ENABLEEXTERNALSERVICES: false
files: files:
rclone-config: rclone-config:
enabled: true enabled: true