authentik version patch update

Reviewed-on: #2
Reviewed-by: simon <s.thiessen@local-it.org>

alaka-defaults.yml

@@ -8,21 +8,26 @@ GLOBALS:
   basic_auth_hash: your_super_secret_password
 authentik:
   env:
-        GROUP_HELP: "Hilfe"
-        EXTRA_DOMAINS: ', `example.com`'
+    GROUP_HELP: Hilfe
+    EXTRA_DOMAINS: ", `example.com`"
+    REDIRECTS: "example.com"
     DEFAULT_LANGUAGE: de
+    AUTHENTIK_DISABLE_UPDATE_CHECK: true
     APPLICATIONS:
-            #Calendar: https://nextcloud.example.com/apps/calendar/
-            #BBB: https://nextcloud.example.com/apps/bbb
+      #Calendar: 
+        #url: https://nextcloud.example.com/apps/calendar/
+        #group:
+      #BBB: 
+        #url: https://nextcloud.example.com/apps/bbb
+        #group:
       KolliCloud-Anleitung:
         url: https://wiki.local-it.org/s/kollicloud-wiki/
-                group: "$GROUP_HELP"
+        group: $GROUP_HELP
     EXTRA_ICONS:
       #Calendar: ~/.abra/recipes/authentik/icons/calendar.svg
       #BBB: ~/.abra/recipes/authentik/icons/bbb.png
       KolliCloud-Anleitung: ~/.abra/recipes/authentik/icons/help.svg
   uncomment:
-        - THEME_BACKGROUND
     - compose.css.yml
   comment:
     - POST_DEPLOY_CMDS
@@ -38,16 +43,16 @@ authentik:
 nextcloud:
   env:
     DEFAULT_QUOTA: "100 MB"
-        APPS: "calendar"
+    APPS: "calendar groupfolders"
     BBB_URL: "{{bbb_url}}"
     FPM_MAX_CHILDREN: 45
     FPM_START_SERVERS: 6
     FPM_MIN_SPARE_SERVERS: 4
     FPM_MAX_SPARE_SERVERS: 14
-
   uncomment:
     - compose.bbb.yml
     - SECRET_BBB_SECRET_VERSION
+    - HSTS_ENABLED
   secrets:
     bbb_secret: "{{bbb_secret}}"
   initial-hooks:
@@ -57,10 +62,13 @@ nextcloud:
     - app run_occ 'app:disable dashboard'
     - app run_occ 'config:system:set upgrade.disable-web --value=true'
     - app set_system_config activity_expire_days 180
+    - app set_system_config updatechecker false
+    - app run_occ 'config:app:set --type boolean --value="false" updatenotification app_updated.enabled'
   upgrade-hooks:
     - app run_occ db:add-missing-indices
     - app run_occ 'maintenance:repair --include-expensive'
     - db upgrade_mariadb
+    - app run_occ 'upgrade'
 pretix:
   initial-hooks:
     - app change_adminpass
@@ -68,7 +76,7 @@ pretix:
     - POST_DEPLOY_CMDS
 wordpress:
   env:
-        LOCALE: 'de_DE'
+    LOCALE: "de_DE"
     DEFAULT_USER_ROLE: administrator
   uncomment:
     - EXTRA_DOMAINS
@@ -117,10 +125,14 @@ outline:
     - generate_secret
 hedgedoc:
   env:
-        CMD_ALLOW_ANONYMOUS: true
+    CMD_ALLOW_ANONYMOUS: false
     CMD_ALLOW_ANONYMOUS_EDITS: true
     CMD_ALLOW_FREEURL: true
-        CMD_COOKIE_POLICY: none
+    CMD_DEFAULT_PERMISSION: freely
+    CMD_ALLOW_EMAIL_REGISTER: false
+  uncomment:
+    - compose.postgresql.yml
+    - SECRET_DB_PASSWORD
 traefik:
   env:
     DASHBOARD_ENABLED: false
@@ -152,6 +164,7 @@ gitea:
     - GITEA_REPO_INDEXER_ENABLED
     - GITEA_ISSUE_INDEXER_TYPE
     - GITEA_STARTUP_TIMEOUT
+    - SECRET_LFS_JWT_SECRET_VERSION
   comment:
     - compose.mariadb.yml
 vaultwarden:
@@ -164,4 +177,3 @@ vaultwarden:
 zammad:
   initial-hooks:
     - zammad-railsserver init
-        

alaka-smtp.yml

@@ -132,6 +132,7 @@ vaultwarden:
   uncomment:
     - compose.smtp.yml
     - SECRET_SMTP_PASSWORD_VERSION
+    - SMTP_ENABLED
   secrets:
     smtp_password: "{{smtp_password}}"
 zammad:

alaka-versions.yml

@@ -1,40 +1,44 @@
 authentik:
-    version: 6.11.1+2024.10.5
+  version: 9.0.2+2025.8.1
 kimai:
-    version: 1.3.0+apache-2.26.0
+  version: 1.4.0+apache-2.34.0
 wekan:
-    version: 3.2.0+v7.80
+  version: 3.3.0+v7.91
 nextcloud:
-    version: 11.1.0+30.0.6-fpm
+  version: 12.0.0+31.0.6-fpm
 onlyoffice:
-    version: 2.9.0+8.2.1
+  version: 2.11.0+9.0.2
 collabora:
-    version: 3.1.0+24.04.10.2.1
+  version: 3.3.0+24.04.13.3.1
 wordpress:
-    version: 2.13.3+6.7.1
+  version: 2.16.0+6.8.1
 vikunja:
   version: 1.1.1+0.24.6
 matrix-synapse:
-    version: 6.6.0+v1.124.0
+  version: 6.8.0+v1.139.2
 element-web:
-    version: 0.10.0+v1.11.92
+  version: 0.11.0+v1.11.105
 rallly:
-    version: 0.7.0+3.11.2
+  version: 1.0.0+4.0.2
 hedgedoc:
-    version: 1.2.1+1.10.0
+  version: 3.0.2+1.10.3
 pretix:
-    version: 2.0.0+2025.1.0
+  version: 2.1.0+2025.5.0
 traefik:
-    version: 2.9.0+v2.11.14
+  version: 3.3.0+v2.11.26
 backup-bot-two:
   version: 2.3.0+2.3.0-beta
 monitoring-ng:
   version: 1.2.0+v1.8.1
 gitea:
-    version: 3.2.0+1.23.1-rootless
+  version: 3.4.0+1.24.2-rootless
 outline:
-    version: 2.8.2+0.81.1
+  version: 2.10.0+0.84.0
 vaultwarden:
-    version: 1.1.0+1.33.2
+  version: 2.1.0+1.34.1
 zammad:
-    version: 2.0.0+6.4.0-34
+  version: 2.1.0+6.5.0-34
+drone:
+  version: 1.9.0+2.26.0
+drone-docker-runner:
+  version: 1.1.3+1.8.4