fix

.deploy-infra/deploy-prod.yaml

@@ -26,32 +26,55 @@ services:
       update_config:
         parallelism: 1
         # order: start-first
-    
+  
-  authelia:
+  zitadel:
-    image: mathwave/sprint-repo:authelia
+    image: ghcr.io/zitadel/zitadel:latest
     networks:
       - common-infra-nginx
     environment:
-      AUTHELIA_JWT_SECRET: $AUTHTHELIA_JWT_SECRET
+      ZITADEL_DATABASE_POSTGRES_HOST: pg.sprinthub.ru
-      AUTHELIA_SESSION_SECRET: $AUTHTHELIA_SESSION_SECRET
+      ZITADEL_DATABASE_POSTGRES_PORT: 5432
-      AUTHELIA_STORAGE_ENCRYPTION_KEY: $AUTHELIA_STORAGE_ENCRYPTION_KEY
+      ZITADEL_DATABASE_POSTGRES_DATABASE: zitadel
-      AUTHELIA_STORAGE_POSTGRES_PORT: "5432"
+      ZITADEL_DATABASE_POSTGRES_USER_USERNAME: postgres
-      AUTHELIA_STORAGE_POSTGRES_DATABASE: "authelia"
+      ZITADEL_DATABASE_POSTGRES_USER_PASSWORD: $DB_PASSWORD_PROD
-      AUTHELIA_STORAGE_POSTGRES_USERNAME: "postgres"
+      ZITADEL_DATABASE_POSTGRES_USER_SSL_MODE: disable
-      AUTHELIA_STORAGE_POSTGRES_PASSWORD: $DB_PASSWORD_PROD
+      ZITADEL_DATABASE_POSTGRES_ADMIN_USERNAME: postgres
-      AUTHELIA_ACCESS_CONTROL_DEFAULT_POLICY: "one_factor"
+      ZITADEL_DATABASE_POSTGRES_ADMIN_PASSWORD: $DB_PASSWORD_PROD
-      AUTHELIA_NOTIFIER_SMTP_ENABLED: "false"
+      ZITADEL_DATABASE_POSTGRES_ADMIN_SSL_MODE: disable
-    volumes:
+      ZITADEL_EXTERNALSECURE: false
-      - /sprint-data/authelia/data:/var/lib/authelia
+      deploy:
-    deploy:
+        mode: replicated
-      mode: replicated
+        replicas: 1
-      replicas: 1
+        restart_policy:
-      restart_policy:
+          condition: any
-        condition: any
+        update_config:
-      placement:
+          parallelism: 1
-        constraints: [node.labels.stage == production]
+    
-      update_config:
+  # authelia:
-        parallelism: 1
+  #   image: mathwave/sprint-repo:authelia
+  #   networks:
+  #     - common-infra-nginx
+  #   environment:
+  #     AUTHELIA_JWT_SECRET: $AUTHTHELIA_JWT_SECRET
+  #     AUTHELIA_SESSION_SECRET: $AUTHTHELIA_SESSION_SECRET
+  #     AUTHELIA_STORAGE_ENCRYPTION_KEY: $AUTHELIA_STORAGE_ENCRYPTION_KEY
+  #     AUTHELIA_STORAGE_POSTGRES_PORT: "5432"
+  #     AUTHELIA_STORAGE_POSTGRES_DATABASE: "authelia"
+  #     AUTHELIA_STORAGE_POSTGRES_USERNAME: "postgres"
+  #     AUTHELIA_STORAGE_POSTGRES_PASSWORD: $DB_PASSWORD_PROD
+  #     AUTHELIA_ACCESS_CONTROL_DEFAULT_POLICY: "one_factor"
+  #     AUTHELIA_NOTIFIER_SMTP_ENABLED: "false"
+  #   volumes:
+  #     - /sprint-data/authelia/data:/var/lib/authelia
+  #   deploy:
+  #     mode: replicated
+  #     replicas: 1
+  #     restart_policy:
+  #       condition: any
+  #     placement:
+  #       constraints: [node.labels.stage == production]
+  #     update_config:
+  #       parallelism: 1
 
   grafana:
     image: grafana/grafana