---
authentik_rac_name: authentik-rac
authentik_rac_dir: /srv/docker/authentik-rac
authentik_rac_image: ghcr.io/goauthentik/rac:2025.6
authentik_rac_domain: rac.example.invalid
authentik_rac_service_port: 3389
authentik_rac_routing_mode: host
authentik_rac_env:
  AUTHENTIK_HOST: https://auth.example.invalid
  AUTHENTIK_TOKEN: "{{ vault_authentik_rac_token | default('CHANGE_ME_IN_VAULT') }}"
authentik_rac_directories:
  - "{{ authentik_rac_dir }}"
authentik_rac_volumes: []
authentik_rac_ports:
  - { host: 3390, container: 3389, protocol: tcp }