From ef3535af1c5a3811cc848f4c2e803f8eddd5319c Mon Sep 17 00:00:00 2001
From: Nathan <nathan@castaldifamily.com>
Date: Sun, 5 Jul 2026 10:51:06 -0400
Subject: [PATCH] fix: downgrade authentik proxy image version to 2026.2.2 for
 all outposts

---
 nodes/heimdall/authentik/compose.yaml | 4 ++--
 nodes/heimdall/prowlarr/compose.yaml  | 2 +-
 nodes/heimdall/radarr/compose.yaml    | 2 +-
 nodes/heimdall/sabnzbd/compose.yaml   | 2 +-
 nodes/heimdall/sonarr/compose.yaml    | 2 +-
 5 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/nodes/heimdall/authentik/compose.yaml b/nodes/heimdall/authentik/compose.yaml
index 4305184..bda9c10 100644
--- a/nodes/heimdall/authentik/compose.yaml
+++ b/nodes/heimdall/authentik/compose.yaml
@@ -50,7 +50,7 @@ services:
       - proxy-net
 
   server:
-    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:2026.5.3
+    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:2026.2.2
     restart: unless-stopped
     mem_limit: 2048m
     container_name: authentik_server
@@ -93,7 +93,7 @@ services:
       - "traefik.http.middlewares.authentik-auth.headers.SSLProxyHeaders.X-Forwarded-Proto=https"
 
   worker:
-    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:2026.5.3
+    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:2026.2.2
     restart: unless-stopped
     mem_limit: 2048m
     container_name: authentik_worker
diff --git a/nodes/heimdall/prowlarr/compose.yaml b/nodes/heimdall/prowlarr/compose.yaml
index 4acd8fe..d49a25c 100644
--- a/nodes/heimdall/prowlarr/compose.yaml
+++ b/nodes/heimdall/prowlarr/compose.yaml
@@ -26,7 +26,7 @@ services:
     networks:
       - proxy-net
   prowlarr_outpost:
-    image: ghcr.io/goauthentik/proxy:2026.5.3
+    image: ghcr.io/goauthentik/proxy:2026.2.2
     container_name: prowlarr_outpost
     networks:
       - proxy-net
diff --git a/nodes/heimdall/radarr/compose.yaml b/nodes/heimdall/radarr/compose.yaml
index 3ca9cf2..24ba49e 100644
--- a/nodes/heimdall/radarr/compose.yaml
+++ b/nodes/heimdall/radarr/compose.yaml
@@ -35,7 +35,7 @@ services:
     #   - "traefik.http.routers.radarr.tls.certresolver=cloudflare"
     #   - "traefik.http.services.radarr.loadbalancer.server.port=7878"
   radarr_outpost:
-    image: ghcr.io/goauthentik/proxy:2026.5.3
+    image: ghcr.io/goauthentik/proxy:2026.2.2
     container_name: radarr_outpost
     networks:
       - proxy-net
diff --git a/nodes/heimdall/sabnzbd/compose.yaml b/nodes/heimdall/sabnzbd/compose.yaml
index 01bc931..53c119c 100644
--- a/nodes/heimdall/sabnzbd/compose.yaml
+++ b/nodes/heimdall/sabnzbd/compose.yaml
@@ -35,7 +35,7 @@ services:
     #   - "traefik.http.routers.sabnzbd.tls.certresolver=cloudflare"
     #   - "traefik.http.services.sabnzbd.loadbalancer.server.port=8080"
   sabnzbd_outpost:
-    image: ghcr.io/goauthentik/proxy:2026.5.3
+    image: ghcr.io/goauthentik/proxy:2026.2.2
     container_name: sabnzbd_outpost
     networks:
       - proxy-net
diff --git a/nodes/heimdall/sonarr/compose.yaml b/nodes/heimdall/sonarr/compose.yaml
index e117d67..81d5e7c 100644
--- a/nodes/heimdall/sonarr/compose.yaml
+++ b/nodes/heimdall/sonarr/compose.yaml
@@ -36,7 +36,7 @@ services:
     #   - "traefik.http.services.sonarr.loadbalancer.server.port=8989"
 
   sonarr_outpost:
-    image: ghcr.io/goauthentik/proxy:2026.5.3
+    image: ghcr.io/goauthentik/proxy:2026.2.2
     # Optionally specify the container's network, which must be able to reach the core authentik server.
     networks:
       - proxy-net