From ca75f686f7835b5c864b6fb50e32a31d5e00a27d Mon Sep 17 00:00:00 2001
From: josedario87 <jodarioel87@gmail.com>
Date: Sat, 1 Nov 2025 00:14:11 -0600
Subject: [PATCH] =?UTF-8?q?Fix:=20Configurar=20acceso=20HTTPS=20a=20Authen?=
 =?UTF-8?q?tik=20v=C3=ADa=20Traefik?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- Cambiar extra_hosts a IP de Traefik (172.19.0.6)
- Agregar aliasPort: 443 para URLs externas correctas
- Usar issuer HTTPS público (via Traefik con SSL)
---
 .gitea/workflows/build-and-deploy.yml | 3 ++-
 docker-compose.yml                    | 2 +-
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/.gitea/workflows/build-and-deploy.yml b/.gitea/workflows/build-and-deploy.yml
index fafaab2..880b6ec 100644
--- a/.gitea/workflows/build-and-deploy.yml
+++ b/.gitea/workflows/build-and-deploy.yml
@@ -44,6 +44,7 @@ jobs:
             "settings": {
               "cert": "${{ vars.APP_DOMAIN }}",
               "port": 80,
+              "aliasPort": 443,
               "redirPort": 80,
               "AgentPong": 300,
               "TlsOffload": true,
@@ -66,7 +67,7 @@ jobs:
                 "allowFraming": false,
                 "authStrategies": {
                   "oidc": {
-                    "issuer": "${{ vars.AUTHENTIK_ISSUER_INTERNAL }}",
+                    "issuer": "${{ vars.AUTHENTIK_ISSUER }}",
                     "clientid": "${{ secrets.AUTHENTIK_CLIENT_ID }}",
                     "clientsecret": "${{ secrets.AUTHENTIK_CLIENT_SECRET }}",
                     "newAccounts": true
diff --git a/docker-compose.yml b/docker-compose.yml
index 6426da5..74ddb9e 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -36,7 +36,7 @@ services:
       - use-vc
       - ndots:1
     extra_hosts:
-      - "authentik.nucleoriofrio.com:172.19.0.5"
+      - "authentik.nucleoriofrio.com:172.19.0.6"
     networks:
       - principal
       - traefik-network