From 804207b02b017b0cf6687887b438d621302377ee Mon Sep 17 00:00:00 2001
From: Mayne0213 <bluemayne0213@icloud.com>
Date: Thu, 1 Jan 2026 22:48:39 +0900
Subject: [PATCH] FEAT(authelia): add authelia sso

- to minio console and pgweb
- minio: Add Authelia middleware to console ingress (API excluded for S3
  access)
- pgweb: Add Authelia middleware to ingress
---
 minio/ingress.yaml | 1 +
 pgweb/ingress.yaml | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/minio/ingress.yaml b/minio/ingress.yaml
index a5a4f84..7f51407 100644
--- a/minio/ingress.yaml
+++ b/minio/ingress.yaml
@@ -30,6 +30,7 @@ metadata:
   namespace: minio
   annotations:
     cert-manager.io/cluster-issuer: letsencrypt-prod
+    traefik.ingress.kubernetes.io/router.middlewares: authelia-authelia-auth@kubernetescrd
 spec:
   ingressClassName: traefik
   tls:
diff --git a/pgweb/ingress.yaml b/pgweb/ingress.yaml
index 1aa47c1..8e486ad 100644
--- a/pgweb/ingress.yaml
+++ b/pgweb/ingress.yaml
@@ -4,8 +4,8 @@ metadata:
   name: pgweb-ingress
   namespace: pgweb
   annotations:
-    nginx.ingress.kubernetes.io/ssl-redirect: "true"
     cert-manager.io/cluster-issuer: "letsencrypt-prod"
+    traefik.ingress.kubernetes.io/router.middlewares: authelia-authelia-auth@kubernetescrd
 spec:
   ingressClassName: traefik
   tls: