#SPDX-License-Identifier: MIT-0
---
# defaults file for authentik_outpost_proxy

# Base directory configuration (inherited from base role or defined here)
docker_compose_base_dir: /etc/docker/compose
docker_volume_base_dir: /srv/data

# Service configuration
authentik_outpost_proxy_service_name: authentik-outpost-proxy
authentik_outpost_proxy_docker_compose_dir: "{{ docker_compose_base_dir }}/{{ authentik_outpost_proxy_service_name }}"

# Container image (must match authentik server version)
authentik_outpost_proxy_image: "ghcr.io/goauthentik/proxy:2026.2.2"

# Connection to authentik server
authentik_outpost_proxy_host: "https://authentik.local.test"
authentik_outpost_proxy_token: "changeme"
authentik_outpost_proxy_insecure: "true"

# Traefik network the service-side routers live on, so the local
# ForwardAuth middleware can reach this outpost over the docker network.
authentik_outpost_proxy_network: "proxy"

# Extra hosts for DNS resolution within the container (e.g. pinning the
# authentik FQDN to a backend IP when the public name is unreachable).
authentik_outpost_proxy_extra_hosts: []
# - "auth.example.com:192.168.56.11"