АРХ - NODEDC PLATFORM: локальный Authentik и reverse proxy

infra/.env.example

@@ -3,10 +3,28 @@ AUTH_DOMAIN=auth.local.nodedc
 LAUNCHER_DOMAIN=launcher.local.nodedc
 TASK_DOMAIN=task.local.nodedc
 
+# proxy
+PLATFORM_HTTP_PORT=80
+LOCAL_LAUNCHER_UPSTREAM=host.docker.internal:5173
+LOCAL_TASK_MANAGER_UPSTREAM=host.docker.internal:8090
+
+# authentik image
+AUTHENTIK_IMAGE=ghcr.io/goauthentik/server
+AUTHENTIK_TAG=2026.2.2
+
+# authentik database
+PG_DB=authentik
+PG_USER=authentik
+PG_PASS=change-me-generate-with-infra-scripts-init-dev-env
+
 # authentik
-AUTHENTIK_SECRET_KEY=
-AUTHENTIK_POSTGRES_PASSWORD=
-AUTHENTIK_REDIS_HOST=redis-authentik
+AUTHENTIK_SECRET_KEY=change-me-generate-with-infra-scripts-init-dev-env
+AUTHENTIK_ERROR_REPORTING__ENABLED=false
+
+# optional first-start bootstrap
+# AUTHENTIK_BOOTSTRAP_EMAIL=admin@nodedc.local
+# AUTHENTIK_BOOTSTRAP_PASSWORD=
+# AUTHENTIK_BOOTSTRAP_TOKEN=
 
 # launcher oidc
 LAUNCHER_OIDC_ISSUER=http://auth.local.nodedc/application/o/launcher/
@@ -21,10 +39,6 @@ PLANE_OIDC_CLIENT_SECRET=
 PLANE_OIDC_REDIRECT_URI=http://task.local.nodedc/auth/oidc/callback
 
 # security
-SESSION_SECRET=
+SESSION_SECRET=change-me-generate-with-infra-scripts-init-dev-env
 COOKIE_DOMAIN=.local.nodedc
 COOKIE_SECURE=false
-
-# current external local apps
-LOCAL_LAUNCHER_URL=http://localhost:5173
-LOCAL_TASK_MANAGER_URL=http://localhost:8090