From fb6b476d6afe7c4e34bf4d47cfc02d4f2f878a09 Mon Sep 17 00:00:00 2001
From: David Landry <david@dmwl.net>
Date: Wed, 9 Oct 2024 16:37:48 -0400
Subject: [PATCH] fix(authelia): add cookie domain

---
 apps/authelia/base/authelia.custom.yaml | 24 +++++++++++++-----------
 apps/authelia/values.yaml               |  9 +++------
 2 files changed, 16 insertions(+), 17 deletions(-)

diff --git a/apps/authelia/base/authelia.custom.yaml b/apps/authelia/base/authelia.custom.yaml
index 9d8a00c..f3269e1 100644
--- a/apps/authelia/base/authelia.custom.yaml
+++ b/apps/authelia/base/authelia.custom.yaml
@@ -137,6 +137,8 @@ data:
       expiration: '1 hour'
       remember_me: '1 month'
       cookies:
+        - domain: 'nc.landry.land'
+          authelia_url: 'https://auth.nc.landry.land'
     regulation:
       max_retries: 3
       find_time: '2 minutes'
@@ -220,7 +222,7 @@ spec:
         app.kubernetes.io/managed-by: Helm
         helm.sh/chart: authelia-0.9.9
       annotations:
-        authelia.com/checksum-config: 9c19d6aae755992be367bad3d6336c8a2932c355f96272a49539571a85af007a
+        authelia.com/checksum-config: 006bc5d2a8e6cd74f00c0997a5f019130c7fcf03d794081d7dab493cba204888
         
     spec:
       hostNetwork: false
@@ -337,16 +339,16 @@ metadata:
     kubernetes.io/tls-acme: "true"
 spec:
   rules:
-  - host: 'auth.nc.landry.land'
-    http:
-      paths:
-        - path: '/'
-          pathType: Prefix
-          backend:
-            service:
-              name: authelia
-              port:
-                number: 80
+    - host: 'auth.nc.landry.land'
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: authelia
+                port:
+                  number: 80
   tls:
     - hosts:
         - 'auth.nc.landry.land'
diff --git a/apps/authelia/values.yaml b/apps/authelia/values.yaml
index 75a6083..331540b 100644
--- a/apps/authelia/values.yaml
+++ b/apps/authelia/values.yaml
@@ -3,13 +3,8 @@ ingress:
 
   certManager: true
 
-  rulesOverride:
-    - host: auth.nc.landry.land
-      path: /
-
   tls:
     enabled: true
-    hostnameOverride: auth.nc.landry.land
     secret: "authelia-tls"
 
 pod:
@@ -762,7 +757,9 @@ configMap:
       ## value, '{secret_name}' is the secret_name above, and '{path}' is this value.
       path: "session.encryption.key"
 
-    cookies: []
+    cookies:
+      - subdomain: "auth"
+        domain: "nc.landry.land"
     # cookies:
     # -
     ## The subdomain to prefix the domain with. For example using `domain` value `example.com` and `subdomain`