Fix: Configurar acceso HTTPS a Authentik vía Traefik

- Cambiar extra_hosts a IP de Traefik (172.19.0.6)
- Agregar aliasPort: 443 para URLs externas correctas
- Usar issuer HTTPS público (via Traefik con SSL)

.gitea/workflows/build-and-deploy.yml

@@ -44,6 +44,7 @@ jobs:
             "settings": {
               "cert": "${{ vars.APP_DOMAIN }}",
               "port": 80,
+              "aliasPort": 443,
               "redirPort": 80,
               "AgentPong": 300,
               "TlsOffload": true,
@@ -66,7 +67,7 @@ jobs:
                 "allowFraming": false,
                 "authStrategies": {
                   "oidc": {
-                    "issuer": "${{ vars.AUTHENTIK_ISSUER_INTERNAL }}",
+                    "issuer": "${{ vars.AUTHENTIK_ISSUER }}",
                     "clientid": "${{ secrets.AUTHENTIK_CLIENT_ID }}",
                     "clientsecret": "${{ secrets.AUTHENTIK_CLIENT_SECRET }}",
                     "newAccounts": true

docker-compose.yml

@@ -36,7 +36,7 @@ services:
       - use-vc
       - ndots:1
     extra_hosts:
-      - "authentik.nucleoriofrio.com:172.19.0.5"
+      - "authentik.nucleoriofrio.com:172.19.0.6"
     networks:
       - principal
       - traefik-network