feat: Authentik, forward auth proxy

playbook-k3s.yml

@@ -1,31 +1,11 @@
 ---
-# - hosts: localhost
-#   gather_facts: no
-#   become: yes
-#   roles:
-#     - role: k3s/provision/delete
-- hosts: localhost
-  gather_facts: no
-  become: yes
-  roles:
-    - role: k3s/provision/create
-- hosts: k3s_hosts
-  gather_facts: yes
-  become: yes
-  roles:
-    - role: k3s/provision/pre
-    - role: k3s/provision/cloud-init
-- hosts: localhost
-  gather_facts: no
-  become: yes
-  roles:
-    - role: k3s/provision/start
 - hosts: k3s_cluster
   gather_facts: yes
   become: yes
   roles:
     - role: prereq
     - role: download
+
 - hosts: master
   become: yes
   roles:
@@ -45,11 +25,12 @@
   become: yes
   roles:
     - role: k3s/copy-config
+
 - hosts: localhost
   become: yes
   roles:
     - role: traefik
-    - role: nginx
     - role: cert-manager
     - role: authentik
+    - role: nginx
     # - role: redis