# PersistentVolumeClaim for Authelia (namespace: sso)
#
# authelia-data — /var/authelia/data/
#   Holds: SQLite database (user sessions, TOTP registrations if used,
#   webauthn data) and notification log.
#   All authentication state is here; back this PVC up alongside LLDAP's.

apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: authelia-data
  namespace: sso
  labels:
    app.kubernetes.io/part-of: net-kingdom-sso-mfa
    net-kingdom/component: sso
spec:
  accessModes: [ReadWriteOnce]
  resources:
    requests:
      storage: 1Gi