authentik version patch update

Reviewed-on: #2
Reviewed-by: simon <s.thiessen@local-it.org>

alaka-defaults.yml

@@ -1,167 +1,179 @@
 GLOBALS:
-    bbb_url: https://talk.example.com/bigbluebutton/
-    bbb_secret: your_super_secret_password
-    turn_url: "turns:talk.example.com:5349?transport=tcp"
-    turn_secret: your_super_secret_password
-    basic_auth_password: your_super_secret_password
-    loki_url: https://loki.monitoring.example.com/loki/api/v1/push
-    basic_auth_hash: your_super_secret_password
+  bbb_url: https://talk.example.com/bigbluebutton/
+  bbb_secret: your_super_secret_password
+  turn_url: "turns:talk.example.com:5349?transport=tcp"
+  turn_secret: your_super_secret_password
+  basic_auth_password: your_super_secret_password
+  loki_url: https://loki.monitoring.example.com/loki/api/v1/push
+  basic_auth_hash: your_super_secret_password
 authentik:
-    env:
-        GROUP_HELP: "Hilfe"
-        EXTRA_DOMAINS: ', `example.com`'
-        DEFAULT_LANGUAGE: de
-        APPLICATIONS: 
-            #Calendar: https://nextcloud.example.com/apps/calendar/
-            #BBB: https://nextcloud.example.com/apps/bbb
-            KolliCloud-Anleitung:
-                url: https://wiki.local-it.org/s/kollicloud-wiki/
-                group: "$GROUP_HELP"
-        EXTRA_ICONS:
-            #Calendar: ~/.abra/recipes/authentik/icons/calendar.svg
-            #BBB: ~/.abra/recipes/authentik/icons/bbb.png
-            KolliCloud-Anleitung: ~/.abra/recipes/authentik/icons/help.svg
-    uncomment:
-        - THEME_BACKGROUND
-        - compose.css.yml
-    comment:
-        - POST_DEPLOY_CMDS
-    initial-hooks:
-       - worker set_admin_pass
-       - worker apply_blueprints
-       - worker add_applications
-       - local set_icons
-       - local set_extra_icons
-    upgrade-hooks:
-      - worker add_applications
-      - local set_extra_icons
+  env:
+    GROUP_HELP: Hilfe
+    EXTRA_DOMAINS: ", `example.com`"
+    REDIRECTS: "example.com"
+    DEFAULT_LANGUAGE: de
+    AUTHENTIK_DISABLE_UPDATE_CHECK: true
+    APPLICATIONS:
+      #Calendar: 
+        #url: https://nextcloud.example.com/apps/calendar/
+        #group:
+      #BBB: 
+        #url: https://nextcloud.example.com/apps/bbb
+        #group:
+      KolliCloud-Anleitung:
+        url: https://wiki.local-it.org/s/kollicloud-wiki/
+        group: $GROUP_HELP
+    EXTRA_ICONS:
+      #Calendar: ~/.abra/recipes/authentik/icons/calendar.svg
+      #BBB: ~/.abra/recipes/authentik/icons/bbb.png
+      KolliCloud-Anleitung: ~/.abra/recipes/authentik/icons/help.svg
+  uncomment:
+    - compose.css.yml
+  comment:
+    - POST_DEPLOY_CMDS
+  initial-hooks:
+    - worker set_admin_pass
+    - worker apply_blueprints
+    - worker add_applications
+    - local set_icons
+    - local set_extra_icons
+  upgrade-hooks:
+    - worker add_applications
+    - local set_extra_icons
 nextcloud:
-    env: 
-        DEFAULT_QUOTA: "100 MB"
-        APPS: "calendar"
-        BBB_URL: "{{bbb_url}}"
-        FPM_MAX_CHILDREN: 45
-        FPM_START_SERVERS: 6
-        FPM_MIN_SPARE_SERVERS: 4
-        FPM_MAX_SPARE_SERVERS: 14
-
-    uncomment:
-        - compose.bbb.yml
-        - SECRET_BBB_SECRET_VERSION
-    secrets:
-        bbb_secret: "{{bbb_secret}}"
-    initial-hooks:
-        #- app install_bbb
-        - app set_default_quota
-        - app install_apps
-        - app run_occ 'app:disable dashboard'
-        - app run_occ 'config:system:set upgrade.disable-web --value=true'
-        - app set_system_config activity_expire_days 180
-    upgrade-hooks:
-        - app run_occ db:add-missing-indices
-        - app run_occ 'maintenance:repair --include-expensive'
-        - db upgrade_mariadb
+  env:
+    DEFAULT_QUOTA: "100 MB"
+    APPS: "calendar groupfolders"
+    BBB_URL: "{{bbb_url}}"
+    FPM_MAX_CHILDREN: 45
+    FPM_START_SERVERS: 6
+    FPM_MIN_SPARE_SERVERS: 4
+    FPM_MAX_SPARE_SERVERS: 14
+  uncomment:
+    - compose.bbb.yml
+    - SECRET_BBB_SECRET_VERSION
+    - HSTS_ENABLED
+  secrets:
+    bbb_secret: "{{bbb_secret}}"
+  initial-hooks:
+    #- app install_bbb
+    - app set_default_quota
+    - app install_apps
+    - app run_occ 'app:disable dashboard'
+    - app run_occ 'config:system:set upgrade.disable-web --value=true'
+    - app set_system_config activity_expire_days 180
+    - app set_system_config updatechecker false
+    - app run_occ 'config:app:set --type boolean --value="false" updatenotification app_updated.enabled'
+  upgrade-hooks:
+    - app run_occ db:add-missing-indices
+    - app run_occ 'maintenance:repair --include-expensive'
+    - db upgrade_mariadb
+    - app run_occ 'upgrade'
 pretix:
-    initial-hooks:
-        - app change_adminpass
-    comment:
-        - POST_DEPLOY_CMDS
+  initial-hooks:
+    - app change_adminpass
+  comment:
+    - POST_DEPLOY_CMDS
 wordpress:
-    env:
-        LOCALE: 'de_DE'
-        DEFAULT_USER_ROLE: administrator
-    uncomment:
-        - EXTRA_DOMAINS
-    initial-hooks:
-        - app core_install
-    upgrade-hooks:
-        - app update
+  env:
+    LOCALE: "de_DE"
+    DEFAULT_USER_ROLE: administrator
+  uncomment:
+    - EXTRA_DOMAINS
+  initial-hooks:
+    - app core_install
+  upgrade-hooks:
+    - app update
 matrix-synapse:
-    env: 
-        ENCRYPTED_BY_DEFAULT: off
-        TURN_URIS: '[{{turn_url}}]'
-        RETENTION_MAX_LIFETIME: 2y
-        ALLOWED_LIFETIME_MAX: 2y
-    uncomment:
-        - POST_DEPLOY_CMDS
-        - compose.turn.yml
-        - TURN_ENABLED
-        - TURN_ALLOW_GUESTS
-        - SECRET_TURN_SHARED_SECRET_VERSION
-        - WEB_CLIENT_LOCATION
-        - compose.admin.yml
-        - ADMIN_INTERFACE_ENABLED
-    secrets:
-        turn_shared_secret: "{{turn_secret}}"
+  env:
+    ENCRYPTED_BY_DEFAULT: off
+    TURN_URIS: '[{{turn_url}}]'
+    RETENTION_MAX_LIFETIME: 2y
+    ALLOWED_LIFETIME_MAX: 2y
+  uncomment:
+    - POST_DEPLOY_CMDS
+    - compose.turn.yml
+    - TURN_ENABLED
+    - TURN_ALLOW_GUESTS
+    - SECRET_TURN_SHARED_SECRET_VERSION
+    - WEB_CLIENT_LOCATION
+    - compose.admin.yml
+    - ADMIN_INTERFACE_ENABLED
+  secrets:
+    turn_shared_secret: "{{turn_secret}}"
 wekan:
-    uncomment:
-        - PASSWORD_LOGIN_ENABLED
-        - LOGO_IMG_URL
-        - LOGO_LINK_URL
-    initial-hooks:
-        - db set_settings
-    upgrade-hooks:
-        - db show_mongo_version
-        - db update_mongo_version
+  uncomment:
+    - PASSWORD_LOGIN_ENABLED
+    - LOGO_IMG_URL
+    - LOGO_LINK_URL
+  initial-hooks:
+    - db set_settings
+  upgrade-hooks:
+    - db show_mongo_version
+    - db update_mongo_version
 backup-bot-two:
-    uncomment:
-        - SECRET_AWS_SECRET_ACCESS_KEY_VERSION
-        - compose.s3.yml
+  uncomment:
+    - SECRET_AWS_SECRET_ACCESS_KEY_VERSION
+    - compose.s3.yml
 onlyoffice:
-    env:
-        AUTO_ASSEMBLY_ENABLED: "true"     
+  env:
+    AUTO_ASSEMBLY_ENABLED: "true"
 outline:
-    env:
-        DEFAULT_LANGUAGE: de_DE
-    secret_hooks: 
-        - generate_secret
+  env:
+    DEFAULT_LANGUAGE: de_DE
+  secret_hooks:
+    - generate_secret
 hedgedoc:
-    env:
-        CMD_ALLOW_ANONYMOUS: true
-        CMD_ALLOW_ANONYMOUS_EDITS: true
-        CMD_ALLOW_FREEURL: true
-        CMD_COOKIE_POLICY: none
+  env:
+    CMD_ALLOW_ANONYMOUS: false
+    CMD_ALLOW_ANONYMOUS_EDITS: true
+    CMD_ALLOW_FREEURL: true
+    CMD_DEFAULT_PERMISSION: freely
+    CMD_ALLOW_EMAIL_REGISTER: false
+  uncomment:
+    - compose.postgresql.yml
+    - SECRET_DB_PASSWORD
 traefik:
-    env:
-        DASHBOARD_ENABLED: false
-        METRICS_ENABLED: 1
-        BASIC_AUTH: 1
-    secrets:
-        usersfile: "{{basic_auth_hash}}"
-    uncomment:
-        - compose.host.yml
-        - compose.metrics.yml
-        - compose.basicauth.yml
-        - SECRET_USERSFILE_VERSION
-        - compose.matrix.yml
-        - MATRIX_FEDERATION_ENABLED
+  env:
+    DASHBOARD_ENABLED: false
+    METRICS_ENABLED: 1
+    BASIC_AUTH: 1
+  secrets:
+    usersfile: "{{basic_auth_hash}}"
+  uncomment:
+    - compose.host.yml
+    - compose.metrics.yml
+    - compose.basicauth.yml
+    - SECRET_USERSFILE_VERSION
+    - compose.matrix.yml
+    - MATRIX_FEDERATION_ENABLED
 monitoring-ng:
-    env:
-        LOKI_PUSH_URL: "{{loki_url}}"
-    uncomment:
-        - compose.promtail.yml
-        - SECRET_BASIC_AUTH_VERSION
-    secrets:
-        basic_auth: "{{basic_auth_password}}"
+  env:
+    LOKI_PUSH_URL: "{{loki_url}}"
+  uncomment:
+    - compose.promtail.yml
+    - SECRET_BASIC_AUTH_VERSION
+  secrets:
+    basic_auth: "{{basic_auth_password}}"
 gitea:
-    env:
-        GITEA_REQUIRE_SIGNIN_VIEW: "false"
-    uncomment:
-        - compose.forgejo.yml
-        - compose.postgres.yml
-        - GITEA_REPO_INDEXER_ENABLED
-        - GITEA_ISSUE_INDEXER_TYPE
-        - GITEA_STARTUP_TIMEOUT
-    comment:
-        - compose.mariadb.yml
+  env:
+    GITEA_REQUIRE_SIGNIN_VIEW: "false"
+  uncomment:
+    - compose.forgejo.yml
+    - compose.postgres.yml
+    - GITEA_REPO_INDEXER_ENABLED
+    - GITEA_ISSUE_INDEXER_TYPE
+    - GITEA_STARTUP_TIMEOUT
+    - SECRET_LFS_JWT_SECRET_VERSION
+  comment:
+    - compose.mariadb.yml
 vaultwarden:
-    uncomment:
-        - compose.mariadb.yml
-        - SECRET_DB_PASSWORD_VERSION
-        - SECRET_DB_ROOT_PASSWORD_VERSION
-    secret_hooks:
-        - insert_vaultwarden_admin_token
+  uncomment:
+    - compose.mariadb.yml
+    - SECRET_DB_PASSWORD_VERSION
+    - SECRET_DB_ROOT_PASSWORD_VERSION
+  secret_hooks:
+    - insert_vaultwarden_admin_token
 zammad:
-    initial-hooks:
-        - zammad-railsserver init
-        
+  initial-hooks:
+    - zammad-railsserver init

alaka-smtp.yml

@@ -1,142 +1,143 @@
 GLOBALS:
-    smtp_password: your_super_secret_password
-    smtp_password_urlencoded: your_super_secret_password
-    smtp_user: noreply
-    smtp_domain: example.com
-    smtp_host: mail.example.com
+  smtp_password: your_super_secret_password
+  smtp_password_urlencoded: your_super_secret_password
+  smtp_user: noreply
+  smtp_domain: example.com
+  smtp_host: mail.example.com
 authentik:
-    env:
-        AUTHENTIK_EMAIL__HOST: "{{smtp_host}}"
-        AUTHENTIK_EMAIL__USERNAME: "{{smtp_user}}@{{smtp_domain}}"
-        AUTHENTIK_EMAIL__FROM: "{{smtp_user}}@{{smtp_domain}}"
-    secrets:
-        email_pass: "{{smtp_password}}"
+  env:
+    AUTHENTIK_EMAIL__HOST: "{{smtp_host}}"
+    AUTHENTIK_EMAIL__USERNAME: "{{smtp_user}}@{{smtp_domain}}"
+    AUTHENTIK_EMAIL__FROM: "{{smtp_user}}@{{smtp_domain}}"
+  secrets:
+    email_pass: "{{smtp_password}}"
 nextcloud:
-    env: 
-        SMTP_AUTHTYPE: LOGIN
-        SMTP_HOST: "{{smtp_host}}"
-        SMTP_SECURE: tls
-        SMTP_NAME: "{{smtp_user}}@{{smtp_domain}}"
-        SMTP_PORT: 587
-        MAIL_FROM_ADDRESS: "{{smtp_user}}"
-        MAIL_DOMAIN: "{{smtp_domain}}"
-    uncomment:
-        - compose.smtp.yml
-        - SECRET_SMTP_PASSWORD_VERSION
-        - compose.apps.yml
-    secrets:
-        smtp_password: "{{smtp_password}}"
+  env:
+    SMTP_AUTHTYPE: LOGIN
+    SMTP_HOST: "{{smtp_host}}"
+    SMTP_SECURE: tls
+    SMTP_NAME: "{{smtp_user}}@{{smtp_domain}}"
+    SMTP_PORT: 587
+    MAIL_FROM_ADDRESS: "{{smtp_user}}"
+    MAIL_DOMAIN: "{{smtp_domain}}"
+  uncomment:
+    - compose.smtp.yml
+    - SECRET_SMTP_PASSWORD_VERSION
+    - compose.apps.yml
+  secrets:
+    smtp_password: "{{smtp_password}}"
 wordpress:
-    env:
-        SMTP_HOST: "{{smtp_host}}"
-        MAIL_FROM: "{{smtp_user}}@{{smtp_domain}}"
-        SMTP_USER: "{{smtp_user}}@{{smtp_domain}}"
-        ADMIN_EMAIL: "{{smtp_admin}}@{{smtp_domain}}"
-    uncomment:
-        - SMTP_PORT
-        - SMTP_AUTH
-        - SMTP_OVERRIDE_FROM
-        - SMTP_TLS
-        - SECRET_SMTP_PASSWORD_VERSION
-        - compose.smtp.yml
-        - compose.mailrelay.yml
-    secrets:
-        smtp_password: "{{smtp_password}}"
+  env:
+    SMTP_HOST: "{{smtp_host}}"
+    MAIL_FROM: "{{smtp_user}}@{{smtp_domain}}"
+    SMTP_USER: "{{smtp_user}}@{{smtp_domain}}"
+    ADMIN_EMAIL: "{{smtp_admin}}@{{smtp_domain}}"
+  uncomment:
+    - SMTP_PORT
+    - SMTP_AUTH
+    - SMTP_OVERRIDE_FROM
+    - SMTP_TLS
+    - SECRET_SMTP_PASSWORD_VERSION
+    - compose.smtp.yml
+    - compose.mailrelay.yml
+  secrets:
+    smtp_password: "{{smtp_password}}"
 vikunja:
-    env:
-        VIKUNJA_MAILER_HOST: "{{smtp_host}}"
-        VIKUNJA_MAILER_AUTHTYPE: login
-        VIKUNJA_MAILER_USERNAME: "{{smtp_user}}"
-        VIKUNJA_MAILER_FROMEMAIL: "{{smtp_user}}@{{smtp_domain}}"
-    uncomment:
-        - compose.smtp.yml
-        - VIKUNJA_MAILER_ENABLED
-        - SECRET_SMTP_PASSWORD_VERSION
-    secrets:
-        smtp_password: "{{smtp_password}}"
+  env:
+    VIKUNJA_MAILER_HOST: "{{smtp_host}}"
+    VIKUNJA_MAILER_AUTHTYPE: login
+    VIKUNJA_MAILER_USERNAME: "{{smtp_user}}"
+    VIKUNJA_MAILER_FROMEMAIL: "{{smtp_user}}@{{smtp_domain}}"
+  uncomment:
+    - compose.smtp.yml
+    - VIKUNJA_MAILER_ENABLED
+    - SECRET_SMTP_PASSWORD_VERSION
+  secrets:
+    smtp_password: "{{smtp_password}}"
 matrix-synapse:
-    env: 
-        ADMIN_EMAIL: "{{smtp_user}}@{{smtp_domain}}"
-        SMTP_APP_NAME: mail
-        SMTP_FROM: "{{smtp_user}}@{{smtp_domain}}"
-        SMTP_HOST: "{{smtp_host}}"
-        SMTP_PORT: 587
-        SMTP_USER: "{{smtp_user}}@{{smtp_domain}}"
-    uncomment:
-        - compose.smtp.yml
-        - SMTP_ENABLED
-        - SECRET_SMTP_PASSWORD_VERSION
-    secrets:
-        smtp_password: "{{smtp_password}}"
+  env:
+    ADMIN_EMAIL: "{{smtp_user}}@{{smtp_domain}}"
+    SMTP_APP_NAME: mail
+    SMTP_FROM: "{{smtp_user}}@{{smtp_domain}}"
+    SMTP_HOST: "{{smtp_host}}"
+    SMTP_PORT: 587
+    SMTP_USER: "{{smtp_user}}@{{smtp_domain}}"
+  uncomment:
+    - compose.smtp.yml
+    - SMTP_ENABLED
+    - SECRET_SMTP_PASSWORD_VERSION
+  secrets:
+    smtp_password: "{{smtp_password}}"
 wekan:
-    env:
-        MAIL_URL: "smtp://{{smtp_user}}%40{{smtp_domain}}:{{smtp_password_urlencoded}}@{{smtp_host}}:587"
-        MAIL_FROM: "Wekan Notifications <{{smtp_user}}@{{smtp_domain}}>"
+  env:
+    MAIL_URL: "smtp://{{smtp_user}}%40{{smtp_domain}}:{{smtp_password_urlencoded}}@{{smtp_host}}:587"
+    MAIL_FROM: "Wekan Notifications <{{smtp_user}}@{{smtp_domain}}>"
 outline:
-    env:
-        SMTP_HOST: "{{smtp_host}}"
-        SMTP_PORT: 465
-        SMTP_USERNAME: "{{smtp_user}}@{{smtp_domain}}"
-        SMTP_FROM_EMAIL: "{{smtp_user}}@{{smtp_domain}}"
-    uncomment:
-        - compose.smtp.yml
-        - SMTP_ENABLED
-        - SMTP_SECURE
-        - SECRET_SMTP_PASSWORD_VERSION
-    secrets:
-        smtp_password: "{{smtp_password}}"
+  env:
+    SMTP_HOST: "{{smtp_host}}"
+    SMTP_PORT: 465
+    SMTP_USERNAME: "{{smtp_user}}@{{smtp_domain}}"
+    SMTP_FROM_EMAIL: "{{smtp_user}}@{{smtp_domain}}"
+  uncomment:
+    - compose.smtp.yml
+    - SMTP_ENABLED
+    - SMTP_SECURE
+    - SECRET_SMTP_PASSWORD_VERSION
+  secrets:
+    smtp_password: "{{smtp_password}}"
 rallly:
-    env:
-        SUPPORT_EMAIL: "{{smtp_user}}@{{smtp_domain}}"
-        SMTP_HOST: "{{smtp_host}}"
-        SMTP_USER: "{{smtp_user}}@{{smtp_domain}}"
-    secrets:
-        smtp_pwd: "{{smtp_password}}"
+  env:
+    SUPPORT_EMAIL: "{{smtp_user}}@{{smtp_domain}}"
+    SMTP_HOST: "{{smtp_host}}"
+    SMTP_USER: "{{smtp_user}}@{{smtp_domain}}"
+  secrets:
+    smtp_pwd: "{{smtp_password}}"
 pretix:
-    env:
-        SMTP_FROM: "{{smtp_user}}@{{smtp_domain}}"
-        SMTP_HOST: "{{smtp_host}}"
-        SMTP_USER: "{{smtp_user}}@{{smtp_domain}}"
-        SMTP_PORT: 587
-        SMTP_TLS: on
-        SMTP_SSL: off
-    secrets: 
-        smtp_password: "{{smtp_password}}"
+  env:
+    SMTP_FROM: "{{smtp_user}}@{{smtp_domain}}"
+    SMTP_HOST: "{{smtp_host}}"
+    SMTP_USER: "{{smtp_user}}@{{smtp_domain}}"
+    SMTP_PORT: 587
+    SMTP_TLS: on
+    SMTP_SSL: off
+  secrets:
+    smtp_password: "{{smtp_password}}"
 traefik:
-    env:
-        LETS_ENCRYPT_EMAIL: "{{smtp_user}}@{{smtp_domain}}"
+  env:
+    LETS_ENCRYPT_EMAIL: "{{smtp_user}}@{{smtp_domain}}"
 gitea:
-    env:
-        GITEA_MAILER_ADDR: "{{smtp_host}}"
-        GITEA_MAILER_PORT: 465
-        GITEA_MAILER_PROTOCOL: smtps
-        GITEA_MAILER_FROM: "{{smtp_user}}@{{smtp_domain}}"
-        GITEA_MAILER_USER: "{{smtp_user}}@{{smtp_domain}}"
-    uncomment:
-        - compose.smtp.yml
-        - GITEA_SMTP_MAILER_ENABLED
-        - SECRET_SMTP_PASSWORD_VERSION
-    secrets:
-        smtp_password: "{{smtp_password}}"
+  env:
+    GITEA_MAILER_ADDR: "{{smtp_host}}"
+    GITEA_MAILER_PORT: 465
+    GITEA_MAILER_PROTOCOL: smtps
+    GITEA_MAILER_FROM: "{{smtp_user}}@{{smtp_domain}}"
+    GITEA_MAILER_USER: "{{smtp_user}}@{{smtp_domain}}"
+  uncomment:
+    - compose.smtp.yml
+    - GITEA_SMTP_MAILER_ENABLED
+    - SECRET_SMTP_PASSWORD_VERSION
+  secrets:
+    smtp_password: "{{smtp_password}}"
 kimai:
-    env:
-        MAILER_URL: "smtp://{{smtp_user}}%40{{smtp_domain}}:{{smtp_password}}@{{smtp_host}}:587"
-        MAILER_FROM: "Kimai Notifications <{{smtp_user}}@{{smtp_domain}}>"
+  env:
+    MAILER_URL: "smtp://{{smtp_user}}%40{{smtp_domain}}:{{smtp_password}}@{{smtp_host}}:587"
+    MAILER_FROM: "Kimai Notifications <{{smtp_user}}@{{smtp_domain}}>"
 vaultwarden:
-    env:
-        SMTP_FROM: "{{smtp_user}}@{{smtp_domain}}"
-        SMTP_USERNAME: "{{smtp_user}}@{{smtp_domain}}"
-        SMTP_HOST: "{{smtp_host}}"
-        SMTP_PORT: 587
-        SMTP_SECURITY: starttls
-    uncomment:
-        - compose.smtp.yml
-        - SECRET_SMTP_PASSWORD_VERSION  
-    secrets:
-        smtp_password: "{{smtp_password}}"
+  env:
+    SMTP_FROM: "{{smtp_user}}@{{smtp_domain}}"
+    SMTP_USERNAME: "{{smtp_user}}@{{smtp_domain}}"
+    SMTP_HOST: "{{smtp_host}}"
+    SMTP_PORT: 587
+    SMTP_SECURITY: starttls
+  uncomment:
+    - compose.smtp.yml
+    - SECRET_SMTP_PASSWORD_VERSION
+    - SMTP_ENABLED
+  secrets:
+    smtp_password: "{{smtp_password}}"
 zammad:
-    env:
-        SMTP_HOST: "{{smtp_host}}"
-        SMTP_LOGIN: "{{smtp_user}}@{{smtp_domain}}"
-    secrets:
-        smtp_password: "{{smtp_password}}"
+  env:
+    SMTP_HOST: "{{smtp_host}}"
+    SMTP_LOGIN: "{{smtp_user}}@{{smtp_domain}}"
+  secrets:
+    smtp_password: "{{smtp_password}}"

alaka-subdomains.yml

@@ -1,36 +1,36 @@
 authentik:
-    subdomain: login.example.com
+  subdomain: login.example.com
 nextcloud:
-    subdomain: files.example.com
+  subdomain: files.example.com
 wordpress:
-    subdomain: blog.example.com
+  subdomain: blog.example.com
 vikunja:
-    subdomain: todo.example.com
+  subdomain: todo.example.com
 matrix-synapse:
-    subdomain: matrix.example.com
+  subdomain: matrix.example.com
 element-web:
-    subdomain: chat.example.com
+  subdomain: chat.example.com
 wekan:
-    subdomain: board.example.com
+  subdomain: board.example.com
 backup-bot-two:
-    subdomain: backup.example.com
+  subdomain: backup.example.com
 onlyoffice:
-    subdomain: office.example.com
+  subdomain: office.example.com
 outline:
-    subdomain: wiki.example.com
+  subdomain: wiki.example.com
 rallly:
-    subdomain: poll.example.com
+  subdomain: poll.example.com
 hedgedoc:
-    subdomain: pad.example.com
+  subdomain: pad.example.com
 pretix:
-    subdomain: tickets.example.com
+  subdomain: tickets.example.com
 monitoring-ng:
-    subdomain: monitoring.example.com
+  subdomain: monitoring.example.com
 gitea:
-    subdomain: git.example.com
+  subdomain: git.example.com
 vaultwarden:
-    subdomain: pass.example.com
+  subdomain: pass.example.com
 zammad:
-    subdomain: support.example.com
+  subdomain: support.example.com
 kimai:
-    subdomain: time.example.com
+  subdomain: time.example.com

alaka-versions.yml

@@ -1,40 +1,44 @@
 authentik:
-    version: 6.11.1+2024.10.5
+  version: 9.0.2+2025.8.1
 kimai:
-    version: 1.3.0+apache-2.26.0
+  version: 1.4.0+apache-2.34.0
 wekan:
-    version: 3.2.0+v7.80
+  version: 3.3.0+v7.91
 nextcloud:
-    version: 11.1.0+30.0.6-fpm
+  version: 12.0.0+31.0.6-fpm
 onlyoffice:
-    version: 2.9.0+8.2.1
+  version: 2.11.0+9.0.2
 collabora:
-    version: 3.1.0+24.04.10.2.1
+  version: 3.3.0+24.04.13.3.1
 wordpress:
-    version: 2.13.3+6.7.1
+  version: 2.16.0+6.8.1
 vikunja:
-    version: 1.1.1+0.24.6
+  version: 1.1.1+0.24.6
 matrix-synapse:
-    version: 6.6.0+v1.124.0
+  version: 6.8.0+v1.139.2
 element-web:
-    version: 0.10.0+v1.11.92
+  version: 0.11.0+v1.11.105
 rallly:
-    version: 0.7.0+3.11.2
+  version: 1.0.0+4.0.2
 hedgedoc:
-    version: 1.2.1+1.10.0
+  version: 3.0.2+1.10.3
 pretix:
-    version: 2.0.0+2025.1.0
+  version: 2.1.0+2025.5.0
 traefik:
-    version: 2.9.0+v2.11.14
+  version: 3.3.0+v2.11.26
 backup-bot-two:
-    version: 2.3.0+2.3.0-beta
+  version: 2.3.0+2.3.0-beta
 monitoring-ng:
-    version: 1.2.0+v1.8.1
+  version: 1.2.0+v1.8.1
 gitea:
-    version: 3.2.0+1.23.1-rootless
+  version: 3.4.0+1.24.2-rootless
 outline:
-    version: 2.8.2+0.81.1
+  version: 2.10.0+0.84.0
 vaultwarden:
-    version: 1.1.0+1.33.2
+  version: 2.1.0+1.34.1
 zammad:
-    version: 2.0.0+6.4.0-34
+  version: 2.1.0+6.5.0-34
+drone:
+  version: 1.9.0+2.26.0
+drone-docker-runner:
+  version: 1.1.3+1.8.4