From f7703312a206ab8e9e390e1c87fef5e858bf3394 Mon Sep 17 00:00:00 2001
From: Nathan <nathan@castaldifamily.com>
Date: Sun, 14 Jun 2026 09:01:59 -0400
Subject: [PATCH] fix: set AUTHENTIK_INSECURE=true for internal connections

- TLS cert is valid for *.castaldifamily.com, not authentik_server hostname
- Internal Docker network traffic is already isolated
- Allows outposts to connect without certificate verification errors
---
 nodes/heimdall/prowlarr/compose.yaml | 2 +-
 nodes/heimdall/radarr/compose.yaml   | 2 +-
 nodes/heimdall/sabnzbd/compose.yaml  | 2 +-
 nodes/heimdall/sonarr/compose.yaml   | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/nodes/heimdall/prowlarr/compose.yaml b/nodes/heimdall/prowlarr/compose.yaml
index 67b1e12..22f6a9c 100644
--- a/nodes/heimdall/prowlarr/compose.yaml
+++ b/nodes/heimdall/prowlarr/compose.yaml
@@ -34,7 +34,7 @@ services:
       AUTHENTIK_HOST: https://authentik_server:9443
       AUTHENTIK_HOST_BROWSER: https://sso.castaldifamily.com
       AUTHENTIK_TOKEN: 42FCcV9gmTfixaak77xW4eAZIMUUJ0u5vGsxvumfo1Lav5DIyLViDz4xqinE
-      AUTHENTIK_INSECURE: "false"
+      AUTHENTIK_INSECURE: "true"
     labels:
       - "traefik.enable=true"
       - "traefik.http.routers.prowlarr-proxy.entrypoints=websecure"
diff --git a/nodes/heimdall/radarr/compose.yaml b/nodes/heimdall/radarr/compose.yaml
index 0f4f32e..8449073 100644
--- a/nodes/heimdall/radarr/compose.yaml
+++ b/nodes/heimdall/radarr/compose.yaml
@@ -43,7 +43,7 @@ services:
       AUTHENTIK_HOST: https://authentik_server:9443
       AUTHENTIK_HOST_BROWSER: https://sso.castaldifamily.com
       AUTHENTIK_TOKEN: mEK1nIhle1dorsb2x7EJlDfwqdQ2GZLlDdzZhTeP9RMvrWtrlM0ZW89SiBWB
-      AUTHENTIK_INSECURE: "false"
+      AUTHENTIK_INSECURE: "true"
     labels:
       - "traefik.enable=true"
       - "traefik.http.routers.radarr-proxy.entrypoints=websecure"
diff --git a/nodes/heimdall/sabnzbd/compose.yaml b/nodes/heimdall/sabnzbd/compose.yaml
index ce8666e..fd45382 100644
--- a/nodes/heimdall/sabnzbd/compose.yaml
+++ b/nodes/heimdall/sabnzbd/compose.yaml
@@ -43,7 +43,7 @@ services:
       AUTHENTIK_HOST: https://authentik_server:9443
       AUTHENTIK_HOST_BROWSER: https://sso.castaldifamily.com
       AUTHENTIK_TOKEN: xvPTq2ASWspkW9Z7H44RPwLZ9LhFqBrtQ11eXPlE7QWGhsixWU7Rc07xVmsw
-      AUTHENTIK_INSECURE: "false"
+      AUTHENTIK_INSECURE: "true"
     labels:
       - "traefik.enable=true"
       - "traefik.http.routers.sabnzbd-proxy.entrypoints=websecure"
diff --git a/nodes/heimdall/sonarr/compose.yaml b/nodes/heimdall/sonarr/compose.yaml
index 0d61fbe..4ba30c2 100644
--- a/nodes/heimdall/sonarr/compose.yaml
+++ b/nodes/heimdall/sonarr/compose.yaml
@@ -44,7 +44,7 @@ services:
     environment:
         AUTHENTIK_HOST: https://authentik_server:9443
         AUTHENTIK_HOST_BROWSER: https://sso.castaldifamily.com
-        AUTHENTIK_INSECURE: "false"
+        AUTHENTIK_INSECURE: "true"
         AUTHENTIK_TOKEN: cJ4UWeFQ2DUTyvR22s588ciFuLSw698HTVxnEf7ecN3dq3nFOyVod6ngE66Z
     labels:
       - "traefik.enable=true"