c4220f2c2d
Generalize the outpost token-pinning path beyond the LDAP outpost so any proxy outpost declaring a token authenticates against the authentik server with the vault token instead of the blueprint's auto-generated one. Drive both from a single rendered script over a target list. Also raise the server healthcheck start_period to 120s: cold first boot runs DB migrations plus app init (~90s observed), which tripped compose --wait as unhealthy at the old 30s. Signed-off-by: Simon Bärlocher <simon@whatwedo.ch> |
||
|---|---|---|
| .. | ||
| blueprints | ||
| docker-compose.yml.j2 | ||
| set-outpost-token.py.j2 | ||
| wait-for-blueprints.py.j2 | ||