working: ansible

handlers/main.yml

@@ -1,9 +1,8 @@
 - name: restart container
-community.docker.docker_compose_v2:
-    project_src: "{{ path }}"
-    project_name: "{{ role_name }}"
-    recreate: "always"
-    services: ["authentik"]
-    state: "restarted"
-when: not _authentik_already_restarted
-
+  community.docker.docker_compose_v2:
+      project_src: "{{ path }}"
+      project_name: "{{ role_name }}"
+      recreate: "always"
+      services: ["authentik"]
+      state: "restarted"
+  when: not _authentik_already_restarted

meta/main.yml

@@ -16,5 +16,5 @@ galaxy_info:
     # NOTE: A tag is limited to a single word comprised of alphanumeric characters.
     #       Maximum 20 tags per role.
 
-# dependencies:
-#  - role: base
+dependencies:
+ - role: traefik

templates/compose.yml.j2

@@ -17,7 +17,7 @@ services:
       - internal
     restart: unless-stopped
     volumes:
-    - ./data/db:/var/lib/postgresql/data
+      - ./data/db:/var/lib/postgresql/data
 
   authentik-proxy:
     # Server includes embeded proxy outpost
@@ -32,9 +32,9 @@ services:
       - internal
     restart: unless-stopped
     volumes:
-    - ./data/authentik_media:/media
-    - ./data/authentik_data:/data
-    - ./data/authentik_templates:/templates
+      - ./data/authentik_media:/media
+      - ./data/authentik_data:/data
+      - ./data/authentik_templates:/templates
     labels:
       traefik.enable: true
       traefik.http.routers.authentik.rule: "Host(`{{ authentik.url }}`)"
@@ -63,24 +63,24 @@ services:
     restart: unless-stopped
     user: root
     volumes:
-    - /var/run/docker.sock:/var/run/docker.sock
-    - ./data/authentik_media:/media
-    - ./data/authentik_data:/data
-    - ./data/authentik_templates:/templates
-    - ./data/authentik_certs:/certs
+      - /var/run/docker.sock:/var/run/docker.sock
+      - ./data/authentik_media:/media
+      - ./data/authentik_data:/data
+      - ./data/authentik_templates:/templates
+      - ./data/authentik_certs:/certs
 
-  {% if authentik.radius.enabled -%}
+{% if authentik.radius.enabled %}
   radius_outpost:
-      image: ghcr.io/goauthentik/radius:2025.10.3
-      networks:
-        - internal
-      ports:
-        - 1812:1812/udp
-      env_file: ".env"
-  {{ endif -}}
+    image: ghcr.io/goauthentik/radius:2025.10.3
+    networks:
+      - internal
+    ports:
+      - 1812:1812/udp
+    env_file: ".env"
+{% endif %}
 
 networks:
   proxy:
     name: traefik_exposed
     external: true
-  internal:
+  internal: {}