fix: use internal Authentik host for outpost containers

- Change AUTHENTIK_HOST from https://sso.castaldifamily.com to http://authentik_server:9000
- Fixes hairpin NAT issue preventing outposts from connecting to Authentik
- Affects prowlarr, radarr, sonarr, and sabnzbd outpost containers

.gitattributes

@@ -0,0 +1 @@
+**/.env filter=git-crypt diff=git-crypt

nodes/heimdall/prowlarr/compose.yaml

@@ -31,7 +31,7 @@ services:
     networks:
       - proxy-net
     environment:
-      AUTHENTIK_HOST: https://sso.castaldifamily.com
+      AUTHENTIK_HOST: http://authentik_server:9000
       AUTHENTIK_TOKEN: 42FCcV9gmTfixaak77xW4eAZIMUUJ0u5vGsxvumfo1Lav5DIyLViDz4xqinE
       AUTHENTIK_INSECURE: "false"
     labels:

nodes/heimdall/radarr/compose.yaml

@@ -40,7 +40,7 @@ services:
     networks:
       - proxy-net
     environment:
-      AUTHENTIK_HOST: https://sso.castaldifamily.com
+      AUTHENTIK_HOST: http://authentik_server:9000
       AUTHENTIK_TOKEN: mEK1nIhle1dorsb2x7EJlDfwqdQ2GZLlDdzZhTeP9RMvrWtrlM0ZW89SiBWB
       AUTHENTIK_INSECURE: "false"
     labels:

nodes/heimdall/sabnzbd/compose.yaml

@@ -40,7 +40,7 @@ services:
     networks:
       - proxy-net
     environment:
-      AUTHENTIK_HOST: https://sso.castaldifamily.com
+      AUTHENTIK_HOST: http://authentik_server:9000
       AUTHENTIK_TOKEN: xvPTq2ASWspkW9Z7H44RPwLZ9LhFqBrtQ11eXPlE7QWGhsixWU7Rc07xVmsw
       AUTHENTIK_INSECURE: "false"
     labels:

nodes/heimdall/sonarr/compose.yaml

@@ -42,7 +42,7 @@ services:
       - proxy-net
     container_name: sonarr_outpost
     environment:
-        AUTHENTIK_HOST: https://sso.castaldifamily.com
+        AUTHENTIK_HOST: http://authentik_server:9000
         AUTHENTIK_INSECURE: "false"
         AUTHENTIK_TOKEN: cJ4UWeFQ2DUTyvR22s588ciFuLSw698HTVxnEf7ecN3dq3nFOyVod6ngE66Z
         # Optional setting to be used when `authentik_host` for internal communication doesn't match the public URL.