# Authentik

Deploys Authentik identity provider with Docker Compose.

## Variables

See `defaults/main.yml` for all available variables.

## Blueprints

The role renders blueprints for:
- Local users (`authentik_local_users`)
- OIDC applications (`authentik_oidc_apps`)
- Proxy applications (`authentik_proxy_apps`)
- Proxy outposts (`authentik_proxy_outposts`)
- Entra ID sources (`authentik_entra_sources`)
- Login screen sources (`authentik_login_source_ids`)

Secrets are passed via `authentik_blueprint_env` using environment variable references.

## Removing resources

To remove resources from Authentik, move slugs to the removal lists:
- `authentik_removed_oidc_apps`
- `authentik_removed_proxy_apps`
- `authentik_removed_local_users`

After confirming deletion, remove the slug from the list.