Add authentik ldap outpost role

roles/authentik/defaults/main.yml

@@ -1,5 +1,5 @@
 ---
-
+authentik_tag: latest
 authentik_env: {}
 docker_networks:
   - name: authentik

roles/authentik/meta/argument_specs.yml

@@ -5,6 +5,11 @@ argument_specs:
     short_description: Authentik container
     description: "Sets up an authentik docker container."
     options:
+      authentik_tag:
+        description: 'Authentik version to use. Can be minor (2024.8) or patch (2024.8.1) or "latest".'
+        type: str
+        required: false
+        default: latest
       authentik_env:
         description: "dict of custom environment variables for authentik container"
         type: dict

roles/authentik/tasks/main.yml

@@ -9,7 +9,7 @@
     name: service
   vars:
     docker_service: authentik
-    docker_image: beryju/authentik:latest
+    docker_image: "beryju/authentik:{{ authentik_tag }}"
     docker_command:
       - server
     docker_image_http_port: 9000
@@ -31,7 +31,7 @@
   vars:
     docker_namespace: authentik
     docker_service: worker
-    docker_image: beryju/authentik:latest
+    docker_image: "beryju/authentik:{{ authentik_tag }}"
     docker_command:
       - worker
     reverse_proxy_type: none

roles/authentik_ldap/README.md

@@ -0,0 +1 @@
+Sets up an authentik ldap outpost container.

roles/authentik_ldap/defaults/main.yaml

@@ -0,0 +1,2 @@
+---
+authentik_ldap_tag: latest

roles/authentik_ldap/meta/argument_specs.yaml

@@ -0,0 +1,53 @@
+---
+argument_specs:
+  main:
+    short_description: Authentik container
+    description: "Sets up an authentik docker container."
+    options:
+      authentik_ldap_tag:
+        description: 'Authentik ldap outpost version to use. Can be minor (2024.8) or patch (2024.8.1) or "latest". Should probably be the same as authentik.'
+        type: str
+        required: false
+        default: latest
+      authentik_ldap_authentik_address:
+        description: "Address starting with https where authentik is reachable"
+        type: str
+        required: true
+      authentik_ldap_outpost_token:
+        description: Outpost token generated by authentik
+        type: str
+        required: true
+
+      # All options after this will be passed directly to the container role
+      docker_service_suffix:
+        description: "Passed to container role"
+        required: false
+      docker_host_user:
+        description: "Passed to container role"
+        required: false
+
+      database_passwords:
+        description: "Passed to container role"
+        required: false
+      docker_additional_services:
+        description: "Passed to container role"
+        required: false
+
+      docker_volume_type:
+        description: "Passed to container role"
+        required: false
+      reverse_proxy_type:
+        description: "Passed to container role"
+        required: false
+      ports:
+        description: "Passed to container role"
+        required: false
+      docker_vhost_domains:
+        description: "Passed to container role"
+        required: false
+      docker_entrypoint:
+        description: "Passed to container role"
+        required: false
+      dockerfile:
+        description: "Passed to container role"
+        required: false

roles/authentik_ldap/tasks/main.yaml

@@ -0,0 +1,12 @@
+---
+- name: Authentik ldap container
+  ansible.builtin.include_role:
+    name: service
+  vars:
+    docker_service: authentik-ldap
+    docker_image: beryju/authentik-ldap:{{ authentik_ldap_tag }}
+    reverse_proxy_type: none
+    docker_env:
+      AUTHENTIK_HOST: "{{ authentik_ldap_authentik_address }}"
+      AUTHENTIK_INSECURE: 'false'
+      AUTHENTIK_TOKEN: "{{ authentik_ldap_outpost_token }}"

roles/service/defaults/main.yml

@@ -11,6 +11,7 @@ docker_proxy_target_protocol: http
 docker_additional_env: {}
 docker_additional_services: []
 docker_database: none
+docker_postgres_tag: 14-alpine
 docker_mounts: []
 docker_network_mode: ""
 docker_networks: []

roles/service/meta/argument_specs.yml

@@ -54,6 +54,11 @@ argument_specs:
           set a password for the mariadb root user
         type: dict
         required: false
+      docker_postgres_tag:
+        description: 'Postgresql version to use. Can be debian (n) or alpine-based (n-alpine), where n can be major version like 14 or minor like 14.13.'
+        type: str
+        required: false
+        default: 14-alpine
       docker_mariadb_config:
         description: |
           A dict specifying config for mariadb. For example

roles/service/tasks/database.yml

@@ -2,7 +2,7 @@
 
 - name: Set postgres container vars
   ansible.builtin.set_fact:
-    db_container_image: 'postgres:14-alpine'
+    db_container_image: 'postgres:{{ docker_postgres_tag }}'
     db_container_env:
       POSTGRES_USER: "{{ docker_service_underscore_name }}"
       POSTGRES_PASSWORD: "{{ database_passwords[docker_service_name] }}"