From 70151b0ef4a3a9d813bf7c3d182deb914a958d9c Mon Sep 17 00:00:00 2001
From: Ruben Hensen <ruben.hensen@protonmail.com>
Date: Sat, 24 Oct 2026 18:51:27 +0200
Subject: [PATCH] authentik: certificate for auth.scoutingmbg.nl

The login of the Scouting MBG photos moves to the group's own domain; the Gateway listener follows once the certificate is there.
---
 authentik/certificate.yaml | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

diff --git a/authentik/certificate.yaml b/authentik/certificate.yaml
index 7646a55..046ce3a 100644
--- a/authentik/certificate.yaml
+++ b/authentik/certificate.yaml
@@ -14,3 +14,20 @@ spec:
   usages:
   - digital signature
   - key encipherment
+---
+# The login of the Scouting MBG photos (immich), see blueprint-scouting.yaml.
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: auth-scoutingmbg-tls
+spec:
+  secretName: auth-scoutingmbg-tls
+  dnsNames:
+  - auth.scoutingmbg.nl
+  issuerRef:
+    group: cert-manager.io
+    kind: ClusterIssuer
+    name: prod-cluster-issuer
+  usages:
+  - digital signature
+  - key encipherment