Digitalboard/digitalboard.core
6
2
Fork 0
Code Pull requests 1 Releases Packages Activity Actions
digitalboard.core/roles/authentik
History
Simon Bärlocher 36e3a4b688
feat: domain list refactor + demo-gymburgdorf fixes 
- Refactor: collapse `*_domain` + `*_extra_domains` into a single
  `*_domains` list across authentik, collabora, garage and nextcloud
  roles. First entry is the canonical FQDN (used for OVERWRITEHOST,
  BASE_URL, notify_push setup and garage root_domain).
- Authentik blueprint: guard the OAuth sources block so an empty
  `authentik_login_sources` no longer renders an invalid YAML key.
- Nextcloud: introduce `nextcloud_collabora_public_domain` and set
  Collabora's `public_wopi_url` separately from the server-to-server
  `wopi_url` so browsers can reach Collabora via the public name while
  Nextcloud still talks to it on the internal one.
- Nextcloud: URL-encode the postgres user/password in DATABASE_URL.
2026-05-20 22:13:34 +02:00
..
defaults feat: domain list refactor + demo-gymburgdorf fixes 2026-05-20 22:13:34 +02:00
handlers chore: add new role boilerplate for authentik 2026-01-14 10:03:06 +01:00
meta chore: add new role boilerplate for authentik 2026-01-14 10:03:06 +01:00
tasks feat: add blueprints for authentik ldap outpost and render values directly instead of using env vars 2026-04-10 14:33:52 +02:00
templates feat: domain list refactor + demo-gymburgdorf fixes 2026-05-20 22:13:34 +02:00
tests chore: add new role boilerplate for authentik 2026-01-14 10:03:06 +01:00
vars chore: add new role boilerplate for authentik 2026-01-14 10:03:06 +01:00
README.md feat: allow deletion of ressources via blueprints 2026-01-14 16:22:58 +01:00

README.md

Authentik

Deploys Authentik identity provider with Docker Compose.

Variables

See defaults/main.yml for all available variables.

Blueprints

The role renders blueprints for:

  • Local users (authentik_local_users)
  • OIDC applications (authentik_oidc_apps)
  • Proxy applications (authentik_proxy_apps)
  • Proxy outposts (authentik_proxy_outposts)
  • Entra ID sources (authentik_entra_sources)
  • Login screen sources (authentik_login_source_ids)

Secrets are passed via authentik_blueprint_env using environment variable references.

Removing resources

To remove resources from Authentik, move slugs to the removal lists:

  • authentik_removed_oidc_apps
  • authentik_removed_proxy_apps
  • authentik_removed_local_users

After confirming deletion, remove the slug from the list.