honestly its been months, i found unstaged changes and forgot

roles/authentik_proxy/upstream/docker-compose.override.yml

@@ -0,0 +1,17 @@
+services:
+  authentik_proxy:
+    container_name: authentik-proxy-outpost
+    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:latest
+    restart: unless-stopped
+    # Optionally specify the container's network, which must be able to reach the core authentik server.
+    # networks:
+    #   - foo
+    ports:
+      - 9000:9000
+      - 9443:9443
+    environment:
+      AUTHENTIK_HOST: https://example.com
+      AUTHENTIK_INSECURE: "false"
+      AUTHENTIK_TOKEN: 
+      # Optional setting to be used when `authentik_host` for internal communication doesn't match the public URL.
+      # AUTHENTIK_HOST_BROWSER: https://external-domain.tld