feat: deploy Authentik with age-encrypted secrets

komodo.toml

@@ -0,0 +1,29 @@
+[[stack]]
+name = "authentik-prod"
+description = "Production Authentik identity provider"
+tags = ["sync:authentik", "application:authentik", "environment:production"]
+deploy = false
+
+[stack.config]
+server = "sbx0docker01"
+project_name = "sso-s1q-dev"
+git_provider = "git.s1q.dev"
+git_https = true
+repo = "docker-compose/authentik"
+branch = "main"
+run_directory = ""
+file_paths = ["docker-compose.yml", "docker-compose.override.yml"]
+additional_env_files = [
+  { path = "env/common.env", track = true },
+  { path = ".komodo/prod.env", track = false },
+]
+config_files = [
+  { path = "secrets/prod.env.age", requires = "Redeploy" },
+]
+compose_cmd_wrapper = "with-age-env secrets/prod.env.age .komodo/prod.env -- [[COMPOSE_COMMAND]]"
+compose_cmd_wrapper_include = ["config", "pull", "up", "run"]
+webhook_enabled = false
+webhook_force_deploy = false
+auto_update = false
+poll_for_updates = false
+send_alerts = true