nathan/homelab
1
0
Fork 0
Code Issues Pull Requests Actions Packages Releases Wiki Activity

fix: set AUTHENTIK_INSECURE=true for internal connections
All checks were successful
Auto-Deploy Changed Stacks / deploy (push) Successful in 13s
Details

Browse Source 
- TLS cert is valid for *.castaldifamily.com, not authentik_server hostname
- Internal Docker network traffic is already isolated
- Allows outposts to connect without certificate verification errors
This commit is contained in:
Nathan 2026-06-14 09:01:59 -04:00
parent 9ec71e0c9d
commit f7703312a2
4 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
nodes/heimdall/prowlarr/compose.yaml
View File

@ -34,7 +34,7 @@ services:
AUTHENTIK_HOST: https://authentik_server:9443 AUTHENTIK_HOST: https://authentik_server:9443
AUTHENTIK_HOST_BROWSER: https://sso.castaldifamily.com AUTHENTIK_HOST_BROWSER: https://sso.castaldifamily.com
AUTHENTIK_TOKEN: 42FCcV9gmTfixaak77xW4eAZIMUUJ0u5vGsxvumfo1Lav5DIyLViDz4xqinE AUTHENTIK_TOKEN: 42FCcV9gmTfixaak77xW4eAZIMUUJ0u5vGsxvumfo1Lav5DIyLViDz4xqinE
AUTHENTIK_INSECURE: "false" AUTHENTIK_INSECURE: "true"
labels: labels:
- "traefik.enable=true" - "traefik.enable=true"
- "traefik.http.routers.prowlarr-proxy.entrypoints=websecure" - "traefik.http.routers.prowlarr-proxy.entrypoints=websecure"

2
nodes/heimdall/radarr/compose.yaml
View File

@ -43,7 +43,7 @@ services:
AUTHENTIK_HOST: https://authentik_server:9443 AUTHENTIK_HOST: https://authentik_server:9443
AUTHENTIK_HOST_BROWSER: https://sso.castaldifamily.com AUTHENTIK_HOST_BROWSER: https://sso.castaldifamily.com
AUTHENTIK_TOKEN: mEK1nIhle1dorsb2x7EJlDfwqdQ2GZLlDdzZhTeP9RMvrWtrlM0ZW89SiBWB AUTHENTIK_TOKEN: mEK1nIhle1dorsb2x7EJlDfwqdQ2GZLlDdzZhTeP9RMvrWtrlM0ZW89SiBWB
AUTHENTIK_INSECURE: "false" AUTHENTIK_INSECURE: "true"
labels: labels:
- "traefik.enable=true" - "traefik.enable=true"
- "traefik.http.routers.radarr-proxy.entrypoints=websecure" - "traefik.http.routers.radarr-proxy.entrypoints=websecure"

2
nodes/heimdall/sabnzbd/compose.yaml
View File

@ -43,7 +43,7 @@ services:
AUTHENTIK_HOST: https://authentik_server:9443 AUTHENTIK_HOST: https://authentik_server:9443
AUTHENTIK_HOST_BROWSER: https://sso.castaldifamily.com AUTHENTIK_HOST_BROWSER: https://sso.castaldifamily.com
AUTHENTIK_TOKEN: xvPTq2ASWspkW9Z7H44RPwLZ9LhFqBrtQ11eXPlE7QWGhsixWU7Rc07xVmsw AUTHENTIK_TOKEN: xvPTq2ASWspkW9Z7H44RPwLZ9LhFqBrtQ11eXPlE7QWGhsixWU7Rc07xVmsw
AUTHENTIK_INSECURE: "false" AUTHENTIK_INSECURE: "true"
labels: labels:
- "traefik.enable=true" - "traefik.enable=true"
- "traefik.http.routers.sabnzbd-proxy.entrypoints=websecure" - "traefik.http.routers.sabnzbd-proxy.entrypoints=websecure"

2
nodes/heimdall/sonarr/compose.yaml
View File

@ -44,7 +44,7 @@ services:
environment: environment:
AUTHENTIK_HOST: https://authentik_server:9443 AUTHENTIK_HOST: https://authentik_server:9443
AUTHENTIK_HOST_BROWSER: https://sso.castaldifamily.com AUTHENTIK_HOST_BROWSER: https://sso.castaldifamily.com
AUTHENTIK_INSECURE: "false" AUTHENTIK_INSECURE: "true"
AUTHENTIK_TOKEN: cJ4UWeFQ2DUTyvR22s588ciFuLSw698HTVxnEf7ecN3dq3nFOyVod6ngE66Z AUTHENTIK_TOKEN: cJ4UWeFQ2DUTyvR22s588ciFuLSw698HTVxnEf7ecN3dq3nFOyVod6ngE66Z
labels: labels:
- "traefik.enable=true" - "traefik.enable=true"