http:
  services:
    authentik-cluster:
      loadBalancer:
        servers:
          - url: "https://authentik.tailnet-68f9.ts.net:9443"  # Authentik Tailscale地址
        serversTransport: authentik-insecure
        healthCheck:
          path: "/flows/-/default/authentication/"
          interval: "30s"
          timeout: "15s"

  serversTransports:
    authentik-insecure:
      insecureSkipVerify: true

  routers:
    authentik-ui:
      rule: "Host(`authentik.git-4ta.live`)"
      service: authentik-cluster
      entryPoints:
        - websecure
      tls:
        certResolver: cloudflare