From dafcb42d0cc3d3202746c8f75c34d2ddc37bbe66 Mon Sep 17 00:00:00 2001
From: Ubuntu <nick@vm-management-200.stabify.de>
Date: Tue, 13 Jan 2026 20:49:56 +0000
Subject: [PATCH] feat(authentik): add media pvc for persistent uploads

---
 apps/authentik/deployment.yaml | 27 +++++++++++++++++++++++++++
 1 file changed, 27 insertions(+)

diff --git a/apps/authentik/deployment.yaml b/apps/authentik/deployment.yaml
index 476ef1d..50d25a5 100644
--- a/apps/authentik/deployment.yaml
+++ b/apps/authentik/deployment.yaml
@@ -17,6 +17,19 @@ data:
   AUTHENTIK_EMAIL__FROM: "authentik@stabify.de"
   AUTHENTIK_ERROR_REPORTING__ENABLED: "false"
 ---
+# PVC for Media (Uploads)
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: authentik-media
+  namespace: authentik
+spec:
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 1Gi
+---
 # SERVER (Web/API)
 apiVersion: apps/v1
 kind: Deployment
@@ -64,6 +77,13 @@ spec:
               port: 9000
             initialDelaySeconds: 10
             periodSeconds: 20
+          volumeMounts:
+            - name: media
+              mountPath: /media
+      volumes:
+        - name: media
+          persistentVolumeClaim:
+            claimName: authentik-media
 ---
 # WORKER (Background Tasks)
 apiVersion: apps/v1
@@ -95,6 +115,13 @@ spec:
                 name: authentik-config
             - secretRef:
                 name: authentik-secrets
+          volumeMounts:
+            - name: media
+              mountPath: /media
+      volumes:
+        - name: media
+          persistentVolumeClaim:
+            claimName: authentik-media
 ---
 apiVersion: v1
 kind: Service