Nathan 3f13409414
All checks were successful
Auto-Deploy Changed Stacks / deploy (push) Successful in 17s
fix: use internal Authentik host for outpost containers
- Change AUTHENTIK_HOST from https://sso.castaldifamily.com to http://authentik_server:9000
- Fixes hairpin NAT issue preventing outposts from connecting to Authentik
- Affects prowlarr, radarr, sonarr, and sabnzbd outpost containers
2026-06-14 08:34:15 -04:00

43 lines
1.4 KiB
YAML

###############################################################
# Networks
###############################################################
networks:
proxy-net:
name: proxy-net
external: true
###############################################################
# Services
###############################################################
services:
prowlarr:
image: lscr.io/linuxserver/prowlarr:2.3.5.5327-ls142
container_name: prowlarr
mem_limit: 2048m
environment:
- PUID=0
- PGID=0
- TZ=America/New_York
volumes:
- /mnt/appdata/prowlarr/data:/config
ports:
- 9696:9696
restart: unless-stopped
networks:
- proxy-net
prowlarr_outpost:
image: ghcr.io/goauthentik/proxy:2026.2.2
container_name: prowlarr_outpost
networks:
- proxy-net
environment:
AUTHENTIK_HOST: http://authentik_server:9000
AUTHENTIK_TOKEN: 42FCcV9gmTfixaak77xW4eAZIMUUJ0u5vGsxvumfo1Lav5DIyLViDz4xqinE
AUTHENTIK_INSECURE: "false"
labels:
- "traefik.enable=true"
- "traefik.http.routers.prowlarr-proxy.entrypoints=websecure"
- "traefik.http.routers.prowlarr-proxy.rule=Host(`prowlarr.castaldifamily.com`)"
- "traefik.http.routers.prowlarr-proxy.tls=true"
- "traefik.http.routers.prowlarr-proxy.tls.certresolver=cloudflare"
- "traefik.http.services.prowlarr-proxy.loadbalancer.server.port=9000"