Add comprehensive authentik documentation and improve role configuration

- Add authentik-deployment-guide.md: Complete step-by-step deployment guide
- Add architecture-decisions.md: Document native DB vs containerized rationale
- Add authentication-architecture.md: SSO strategy and integration patterns
- Update deployment-guide.md: Integrate authentik deployment procedures
- Update security-hardening.md: Add multi-layer security documentation
- Update service-integration-guide.md: Add authentik integration examples
- Update README.md: Professional project overview with architecture benefits
- Update authentik role: Fix HTTP binding, add security configs, improve templates
- Remove unused authentik task files: containers.yml, networking.yml

Key improvements:
* Document security benefits of native databases over containers
* Document Unix socket IPC architecture advantages
* Provide comprehensive troubleshooting and deployment procedures
* Add forward auth integration patterns for services
* Fix authentik HTTP binding from 127.0.0.1 to 0.0.0.0
* Add shared memory and IPC security configurations

roles/authentik/tasks/user.yml

@@ -4,30 +4,30 @@
 - name: Create authentik group
   group:
     name: "{{ authentik_group }}"
-    system: yes
+    system: true
 
 - name: Create authentik user
   user:
     name: "{{ authentik_user }}"
     group: "{{ authentik_group }}"
-    system: yes
+    system: true
     shell: /bin/bash
     home: "{{ authentik_home }}"
-    create_home: yes
+    create_home: true
     comment: "Authentik authentication service"
 
 - name: Set up subuid for authentik user
   lineinfile:
     path: /etc/subuid
     line: "{{ authentik_user }}:{{ authentik_subuid_start }}:{{ authentik_subuid_size }}"
-    create: yes
+    create: true
     mode: '0644'
 
 - name: Set up subgid for authentik user
   lineinfile:
     path: /etc/subgid
     line: "{{ authentik_user }}:{{ authentik_subgid_start }}:{{ authentik_subgid_size }}"
-    create: yes
+    create: true
     mode: '0644'
 
 - name: Create authentik directories
@@ -46,6 +46,7 @@
     - "{{ authentik_home }}/.config/containers/systemd"
     - "{{ authentik_home }}/data"
     - "{{ authentik_home }}/media"
+    - "{{ authentik_home }}/logs"
 
 - name: Enable lingering for authentik user
   command: loginctl enable-linger {{ authentik_user }}
@@ -54,7 +55,19 @@
 
 - name: Initialize user systemd for authentik
   systemd:
-    daemon_reload: yes
+    daemon_reload: true
     scope: user
-  become: yes
-  become_user: "{{ authentik_user }}"
+  become: true
+  become_user: "{{ authentik_user }}"
+
+- name: Get authentik user UID and GID for container configuration
+  shell: |
+    echo "uid=$(id -u {{ authentik_user }})"
+    echo "gid=$(id -g {{ authentik_user }})"
+  register: authentik_user_info
+  changed_when: false
+
+- name: Set authentik UID/GID facts for container templates
+  set_fact:
+    authentik_uid: "{{ authentik_user_info.stdout_lines[0] | regex_replace('uid=', '') }}"
+    authentik_gid: "{{ authentik_user_info.stdout_lines[1] | regex_replace('gid=', '') }}"