Digitalboard/digitalboard.core
6
2
Fork 0
Code Pull requests 3 Releases Packages Activity Actions

feat(authentik): pin known tokens on proxy outposts too

Browse source 
Generalize the outpost token-pinning path beyond the LDAP outpost so any
proxy outpost declaring a token authenticates against the authentik
server with the vault token instead of the blueprint's auto-generated
one. Drive both from a single rendered script over a target list.

Also raise the server healthcheck start_period to 120s: cold first boot
runs DB migrations plus app init (~90s observed), which tripped
compose --wait as unhealthy at the old 30s.

Signed-off-by: Simon Bärlocher <simon@whatwedo.ch>
This commit is contained in:
Simon Bärlocher 2026-07-02 17:11:51 +02:00
parent 0733d5710f
commit c4220f2c2d
No known key found for this signature in database
GPG key ID: 63DE20495932047A
3 changed files with 45 additions and 17 deletions
Download patch file Download diff file Expand all files Collapse all files

4
roles/authentik/templates/docker-compose.yml.j2
View file

@ -23,7 +23,9 @@ services:
command: server
healthcheck:
test: ["CMD", "ak", "healthcheck"]
start_period: 30s
# Cold first boot runs DB migrations + app init (~90s observed);
# start_period must cover that or compose --wait trips unhealthy.
start_period: 120s
interval: 10s
retries: 5
timeout: 5s