From bc8921654851896996e523848f4525c392eeae00 Mon Sep 17 00:00:00 2001
From: Davide Piu <davide@davidepiu.xyz>
Date: Thu, 19 Feb 2026 23:13:32 +0000
Subject: [PATCH] fix: allow ACME solver port 8089 in Authelia NetworkPolicy

Same fix as flux-system: Traefik needs to reach the cert-manager
ACME HTTP-01 solver pod on port 8089 for TLS certificate issuance.
---
 clusters/lab/security/authelia.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/clusters/lab/security/authelia.yaml b/clusters/lab/security/authelia.yaml
index 43302e0..d48074f 100644
--- a/clusters/lab/security/authelia.yaml
+++ b/clusters/lab/security/authelia.yaml
@@ -96,3 +96,5 @@ spec:
     ports:
     - port: 9091
       protocol: TCP
+    - port: 8089
+      protocol: TCP