honestly its been months, i found unstaged changes and forgot

roles/authentik_rac/upstream/SOURCE.md

@@ -1,7 +1,13 @@
 # Upstream Snapshot
 
-This directory stores copied upstream reference files for the `authentik_rac` role.
+Role: `authentik_rac`
+Snapshot source inventory: `docs/upstream-sources.yml`
+Snapshot status: `tracked`
 
-See `docs/upstream-sources.yml` for repository URLs, refs, README paths, Compose paths, and verification status.
+Fetched repositories:
+- application README `README.md`: copied
+- application Compose URL `https://docs.goauthentik.io/add-secure-apps/outposts/manual-deploy-docker-compose/`: invalid (response is not Compose-shaped YAML)
+README Compose candidates: 0
+Ambiguous README files: 0
 
-Snapshot files are reference material only. Deployments are generated from this role's `templates/` directory.
+These files are reference snapshots only. Deployments are generated from role templates.

roles/authentik_rac/upstream/docker-compose.override.yml

@@ -0,0 +1,10 @@
+  authentik-rac:
+    container_name: authentik-rac
+    restart: unless-stopped
+    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/rac}:latest
+    environment:
+      AUTHENTIK_HOST: https://example.com
+      AUTHENTIK_INSECURE: "false"
+      AUTHENTIK_TOKEN: changeme
+    depends_on:
+      - authentik-server