91d5be8d21
Both outposts reach authentik over auth.gymb.*, which presents a valid
Let's Encrypt cert via the reverseproxy (verified: ssl_verify_result=0
from the storage subnet). Drop the insecure TLS skip:
- proxy outpost: authentik_outpost_proxy_insecure -> "false"
- ldap outpost: pin authentik_outpost_ldap_insecure "false" instead of
relying on the role default ("true").
Addresses the automated security review finding (TLS verification disabled).
|
||
|---|---|---|
| .. | ||
| group_vars | ||
| host_vars | ||
| hosts.yml | ||