АРХ - NODEDC PLATFORM: bootstrap Authentik applications

infra/README.md

@@ -59,10 +59,20 @@ docker compose --env-file infra/.env -f infra/docker-compose.dev.yml up -d
 ```bash
 docker compose --env-file infra/.env -f infra/docker-compose.dev.yml ps
 curl -I -H 'Host: auth.local.nodedc' http://127.0.0.1/
+curl -I -H 'Host: launcher.local.nodedc' http://127.0.0.1/
+curl -I -H 'Host: task.local.nodedc' http://127.0.0.1/
 ```
 
 Generated Authentik bootstrap credentials are stored only in `infra/.env`.
 
+5. Bootstrap local Authentik groups and OIDC applications:
+
+```bash
+NODEDC_BOOTSTRAP_ADMIN_EMAIL=dcctouch@gmail.com infra/scripts/bootstrap-authentik-dev.sh
+```
+
+The script is idempotent. It creates NODE.DC groups, Launcher and Task Manager OAuth2 providers, application tiles, group access bindings and local OIDC client secrets in `infra/.env`.
+
 ## Current local status
 
 This stack was verified locally with `PLATFORM_PROXY_IMAGE=nodedc/plane-proxy:ru`:
@@ -71,6 +81,7 @@ This stack was verified locally with `PLATFORM_PROXY_IMAGE=nodedc/plane-proxy:ru
 - `launcher.local.nodedc` returns `200` from the current Vite launcher through Caddy;
 - `task.local.nodedc` returns `200` from the current Plane runtime through Caddy;
 - Authentik server, Authentik worker and PostgreSQL report healthy in Docker Compose.
+- Authentik login via `auth.local.nodedc` has been verified manually with the local admin user.
 
 Browser testing still requires `/etc/hosts` entries on the host machine.