Joakim
0507e3291d
- Change reverse_proxy from https:// to http:// backend - Use authentik_http_port instead of authentik_https_port - Remove unnecessary TLS transport configuration - Remove health check for non-existent endpoint This aligns the Ansible template with the working configuration where authentik only serves HTTP internally and Caddy handles SSL.
41 lines
1.6 KiB
Django/Jinja
41 lines
1.6 KiB
Django/Jinja
# Authentik Configuration - Unix Socket IPC
|
|
# Generated by Ansible - DO NOT EDIT
|
|
|
|
# PostgreSQL Configuration (Unix Socket)
|
|
AUTHENTIK_POSTGRESQL__HOST={{ postgresql_unix_socket_directories }}
|
|
AUTHENTIK_POSTGRESQL__NAME={{ authentik_db_name }}
|
|
AUTHENTIK_POSTGRESQL__USER={{ authentik_db_user }}
|
|
AUTHENTIK_POSTGRESQL__PASSWORD={{ authentik_db_password }}
|
|
# No port needed for Unix socket
|
|
|
|
# Valkey/Redis Configuration (Unix Socket) - Using cache URL format to avoid port parsing issues
|
|
AUTHENTIK_CACHE__URL=unix://{{ valkey_unix_socket_path }}?db={{ authentik_valkey_db }}&password={{ valkey_password }}
|
|
|
|
# Authentik Core Configuration
|
|
AUTHENTIK_SECRET_KEY={{ authentik_secret_key }}
|
|
AUTHENTIK_LOG_LEVEL={{ authentik_log_level }}
|
|
AUTHENTIK_ERROR_REPORTING__ENABLED={{ authentik_error_reporting | lower }}
|
|
AUTHENTIK_URL=https://{{authentik_domain}}
|
|
|
|
# Security Configuration
|
|
AUTHENTIK_COOKIE_DOMAIN={{ authentik_domain }}
|
|
AUTHENTIK_DISABLE_UPDATE_CHECK=true
|
|
AUTHENTIK_DISABLE_STARTUP_ANALYTICS=true
|
|
|
|
# Network binding
|
|
AUTHENTIK_LISTEN__HTTP={{ authentik_bind_address }}:{{ authentik_http_port }}
|
|
|
|
{% if authentik_email_enabled %}
|
|
# Email Configuration
|
|
AUTHENTIK_EMAIL__HOST={{ authentik_email_host }}
|
|
AUTHENTIK_EMAIL__PORT={{ authentik_email_port }}
|
|
AUTHENTIK_EMAIL__USERNAME={{ authentik_email_username }}
|
|
AUTHENTIK_EMAIL__PASSWORD={{ authentik_email_password }}
|
|
AUTHENTIK_EMAIL__USE_TLS={{ authentik_email_tls | lower }}
|
|
AUTHENTIK_EMAIL__FROM={{ authentik_email_from }}
|
|
{% endif %}
|
|
|
|
# Default admin user
|
|
AUTHENTIK_BOOTSTRAP_PASSWORD={{ authentik_default_admin_password }}
|
|
AUTHENTIK_BOOTSTRAP_EMAIL={{ authentik_default_admin_email }}
|