ansible-roles-authentik

• https://docs.goauthentik.io/docs/install-config/install/docker-compose

Task Configuration

Deployment Example

- name: Setup proxy and service
  hosts: somehost
  become: true
  roles:
    - role: authentik
    - role: caddy
      caddy_sites:
        - name: uptime
          host: "{{ portainer_url }}"
          srv: "127.0.0.1:9000"
    - role: firewalld
      firewalld_add:
        - name: public
          services:
            - http
            - https
          forwards:
            - port: 80
              to: 8080
            - port: 443
              to: 8443

Intial Setup

vist your deployment

http://<your server's IP or hostname>:9000/if/flow/initial-setup/
https://<hostname>/if/flow/initial-setup/

Deployment and Removal

Sometimes you need to manually stop the running containers to get a clean run when re-deploying Services must be stopped as the respecitve user or another means to aquire the correct user scope for systemd

systemctl --user stop container-caddy.service
systemctl --user stop container-authentik.service

Deploy

ansible-playbook -i hosts site.yml --tags=firewalld,caddy,authentik --limit=somehost

Remove

ansible-playbook -i hosts site.yml --tags=firewalld,traecaddyfik,authentik --extra-vars "container_state=absent firewall_action=remove" --limit=somehost