From 0a0cb62cb034895786bcf1b6e7c1721a78ef1f65 Mon Sep 17 00:00:00 2001
From: Conan Scott <conanscott@gmail.com>
Date: Thu, 22 Jan 2026 18:14:15 +1100
Subject: [PATCH] updated storage config for branding and icons

---
 values.yaml | 59 ++++++++++++++++++++++-------------------------------
 1 file changed, 24 insertions(+), 35 deletions(-)

diff --git a/values.yaml b/values.yaml
index 24161d0..0bfe8e4 100644
--- a/values.yaml
+++ b/values.yaml
@@ -6,10 +6,8 @@ fullnameOverride: ""
 # -- Override the Kubernetes version, which is used to evaluate certain manifests
 kubeVersionOverride: ""
 
-
 ## Globally shared configuration for authentik components.
 global:
-
   # To override bitnami images
   security:
     allowInsecureImages: true
@@ -135,16 +133,12 @@ global:
 
   # -- Additional volumeMounts to all deployed Deployments. Does not apply to GeoIP
   # @default -- `[]` (See [values.yaml])
-  volumeMounts: []
-    # - name: custom
-    #   mountPath: /custom
-
-  # -- Additional volumes to all deployed Deployments.
-  # @default -- `[]` (See [values.yaml])
-  volumes: []
-    # - name: custom
-    #   emptyDir: {}
-
+  #volumeMounts:
+  #  - name: media
+  #    mountPath: /data
+  #volumes:
+  #  - name: media
+  #    emptyDir: {}
 
 ## Authentik configuration
 authentik:
@@ -222,7 +216,6 @@ blueprints:
   # Only keys in the secret ending with `.yaml` will be discovered and applied.
   secrets: []
 
-
 ## authentik server
 server:
   # -- whether to enable server resources
@@ -303,7 +296,11 @@ server:
   # -- Environment variables to pass to the authentik server. Does not apply to GeoIP
   # See configuration options at https://goauthentik.io/docs/installation/configuration/
   # @default -- `[]` (See [values.yaml])
-  env: []
+  env:
+    - name: AUTHENTIK_STORAGE__BACKEND
+      value: file
+    - name: AUTHENTIK_STORAGE__FILE__PATH
+      value: /data      
     # - name: AUTHENTIK_VAR_NAME
     #   value: VALUE
     # - name: AUTHENTIK_VAR_OTHER
@@ -344,14 +341,13 @@ server:
   #     - echo init
 
   # -- Additional volumeMounts to the authentik server main container
-  volumeMounts: []
-    # - name: custom
-    #   mountPath: /custom
-
-  # -- Additional volumes to the authentik server pod
-  volumes: []
-    # - name: custom
-    #   emptyDir: {}
+  volumeMounts:
+    - name: data
+      mountPath: /data
+  volumes:
+    - name: data
+      persistentVolumeClaim:
+        claimName: authentik-media
 
   # -- Annotations to be added to the authentik server Deployment
   deploymentAnnotations: {}
@@ -656,7 +652,6 @@ server:
       # -- Additional custom rules that can be added to the route
       additionalRules: []
 
-
 ## authentik worker
 worker:
   # -- whether to enable worker resources
@@ -778,14 +773,12 @@ worker:
   #     - echo init
 
   # -- Additional volumeMounts to the authentik worker main container
-  volumeMounts: []
-    # - name: custom
-    #   mountPath: /custom
-
-  # -- Additional volumes to the authentik worker pod
-  volumes: []
-    # - name: custom
-    #   emptyDir: {}
+  #volumeMounts:
+  #  - name: media
+  #    mountPath: /data/media
+  #volumes:
+  #  - name: media
+  #    emptyDir: {}
 
   # -- Annotations to be added to the authentik worker Deployment
   deploymentAnnotations: {}
@@ -974,7 +967,6 @@ worker:
       # -- Prometheus ServiceMonitor annotations
       annotations: {}
 
-
 serviceAccount:
   # -- Create service account. Needed for managed outposts
   create: true
@@ -987,7 +979,6 @@ serviceAccount:
     enabled: false
   fullnameOverride: authentik
 
-
 geoip:
   # -- enable GeoIP sidecars for the authentik server and worker pods
   enabled: false
@@ -1068,7 +1059,6 @@ geoip:
     #   drop:
     #     - ALL
 
-
 prometheus:
   rules:
     enabled: false
@@ -1085,7 +1075,6 @@ prometheus:
     # -- PrometheusRuleGroup additional annotations
     additionalRuleGroupAnnotations: {}
 
-
 postgresql:
   # -- enable the Bitnami PostgreSQL chart. Refer to https://github.com/bitnami/charts/blob/main/bitnami/postgresql/ for possible values.
   enabled: true