Post-Tyranny-Tech-Infrastru.../ansible/roles/authentik/handlers/main.yml

---
# Handlers for Authentik role

- name: Restart Authentik
  community.docker.docker_compose_v2:
    project_src: "{{ authentik_config_dir }}"
    state: restarted
Add Authentik identity provider to architecture Added Authentik as the identity provider for SSO authentication: Why Authentik: - MIT license (truly open source, most permissive) - Simple Docker Compose deployment (no manual wizards) - Lightweight Python-based architecture - Comprehensive protocol support (SAML, OAuth2/OIDC, LDAP, RADIUS) - No Redis required as of v2025.10 (all caching in PostgreSQL) - Active development and strong community Implementation: - Created complete Authentik Ansible role - Docker Compose with server + worker architecture - PostgreSQL 16 database backend - Traefik integration with Let's Encrypt SSL - Bootstrap tasks for initial setup guidance - Health checks and proper service dependencies Architecture decisions updated: - Documented comparison: Authentik vs Zitadel vs Keycloak - Explained Zitadel removal (FirstInstance bugs) - Added deployment example and configuration notes Next steps: - Update documentation (PROJECT_REFERENCE.md, README.md) - Create Authentik agent configuration - Add secrets template - Test deployment on test server 🤖 Generated with Claude Code Co-Authored-By: Claude <noreply@anthropic.com> 2026-01-07 11:23:13 +01:00			`---`
			`# Handlers for Authentik role`

			`- name: Restart Authentik`
			`community.docker.docker_compose_v2:`
			`project_src: "{{ authentik_config_dir }}"`
			`state: restarted`