docker run -d --name authelia \
  -p 9091:9091 \
  -v /data/authelia:/config \
  docker.io/authelia/authelia:latest

docker run -d --name authelia \
  --restart unless-stopped \
  -p 9091:9091 \
  -v /data/authelia:/config \
  -e AUTHELIA_JWT_SECRET=changeme \
  docker.io/authelia/authelia:4.38.0

apiVersion: apps/v1
kind: Deployment
metadata:
  name: authelia
spec:
  replicas: 1
  selector:
    matchLabels:
      app: authelia
  template:
    metadata:
      labels:
        app: authelia
    spec:
      containers:
        - name: authelia
          image: docker.io/authelia/authelia:4.38.0
          ports:
            - containerPort: 9091
          volumeMounts:
            - name: config
              mountPath: /config
          envFrom:
            - secretRef:
                name: authelia-secrets
      volumes:
        - name: config
          persistentVolumeClaim:
            claimName: authelia-config
---
apiVersion: v1
kind: Service
metadata:
  name: authelia
spec:
  selector:
    app: authelia
  ports:
    - port: 9091
      targetPort: 9091