update authentik docs

docs/installation/authentik.md

@@ -9,24 +9,52 @@ Alle Apps die per SSO angebunden werden sollen, müssen später in der Administr
 
 ```
 abra app new authentik
-abra app config app_name 
-abra app deploy app_name 
+abra app config <app_name> 
+abra app secret insert <app_name> email_pass v1 <password>
+abra app secret generate -a authentik.dev.local-it.cloud
+abra app deploy <app_name> 
+abra app cmd <app_name> app set_admin_pass
 ```
 
 
-## Flows
-
--> flows -> import 
-change background image
-add flows to system -> umgebung -> your tenant
-
-## email template
-
-docker cp initial-reset.html sso_app:/templates/
-phasen -> default-recovery-email -> email template
-
-
 ## Theming
-docker cp holsteincloud.svg sso_app:/media/
 
-System -> Umgebung -> Logo / Favicon: /media/holsteincloud.svg
+Platziere die Dateien `flow_background.jpg`, `icon_left_brand.svg` und `icon.png` in einem Ordner`./<assets>`.
+
+Füge folgende Zeile zur Konfiguration hinzu:
+
+```
+abra app config <app_name> 
+COPY_ASSETS="flow_background.jpg|app:/web/dist/assets/images/ icon_left_brand.svg|app:/web/dist/assets/icons/ icon.png|app:/web/dist/assets/icons/"
+```
+
+Nach jedem neuen deploy / upgrade führe folgenden Befehl aus:
+```
+abra app cmd -l <app_name> customize ./<assets>
+```
+
+## Rotate Secrets
+
+Inkrementiere die Secret Versionen
+```
+abra app config <app_name> 
+SECRET_SECRET_KEY_VERSION=v2
+SECRET_DB_PASSWORD_VERSION=V2
+SECRET_ADMIN_TOKEN_VERSION=v2
+SECRET_ADMIN_PASS_VERSION=v2
+```
+
+Aktualisiere die Secrets:
+
+~~~
+abra app secret generate -a <app_name>
+abra app undeploy <app_name>
+abra app deploy <app_name>
+abra app cmd <app_name> db rotate_db_pass
+abra app cmd <app_name> app set_admin_pass
+abra app cmd -l <app_name> customize ./<assets>
+~~~
+
+## Upgrade
+
+TODO