fix outline oidc config

.env.sample

@@ -28,6 +28,9 @@ AUTHENTIK_LOG_LEVEL=info
 
 ## ADMIN
 AUTHENTIK_BOOTSTRAP_EMAIL=admin@example.com
+# The admin password will be overwritten by set_admin_pass() use this env only to skip the manual setup process
+#AUTHENTIK_BOOTSTRAP_PASSWORD=changemeimmediately!
+
 
 ## EMAIL
 AUTHENTIK_EMAIL__HOST=smtp
@@ -128,6 +131,7 @@ COPY_ASSETS="$COPY_ASSETS icon.png|app:/web/dist/assets/icons/"
 # SECRET_KIMAI_ID_VERSION=v1
 # SECRET_KIMAI_SECRET_VERSION=v1
 # APP_ICONS="$APP_ICONS kimai:~/.abra/recipes/authentik/icons/kimai_logo.png"
+# KIMAI_GROUP='kimai_admin'
 # KIMAI_APPGROUP="$GROUP_ORGANISATION"
 
 # COMPOSE_FILE="$COMPOSE_FILE:compose.zammad.yml"

abra.sh

@@ -10,7 +10,7 @@ export WORDPRESS_CONFIG_VERSION=v8
 export MATRIX_CONFIG_VERSION=v4
 export WEKAN_CONFIG_VERSION=v6
 export VIKUNJA_CONFIG_VERSION=v4
-export OUTLINE_CONFIG_VERSION=v5
+export OUTLINE_CONFIG_VERSION=v6
 export KIMAI_CONFIG_VERSION=v3
 export ZAMMAD_CONFIG_VERSION=v4
 export RALLLY_CONFIG_VERSION=v5
@@ -61,7 +61,8 @@ from authentik.core.models import Group
 
 groups = [
     os.environ.get('WORDPRESS_GROUP', ''),
-    os.environ.get('MILA_GROUP', '')
+    os.environ.get('MILA_GROUP', ''),
+    os.environ.get('KIMAI_GROUP', '')
 ]
 groups = [g.strip() for g in groups if g.strip()]
 if not groups:

compose.outposts.ldap.yml

@@ -1,7 +1,7 @@
 version: "3.8"
 services:
   authentik_ldap:
-      image: ghcr.io/goauthentik/ldap:2026.5.2
+      image: ghcr.io/goauthentik/ldap:2026.8.0
       # Optionally specify which networks the container should be
       # might be needed to reach the core authentik server
       networks:

compose.yml

@@ -22,6 +22,7 @@ x-env: &env
     - AUTHENTIK_FOOTER_LINKS
     - AUTHENTIK_IMPERSONATION
     - AUTHENTIK_BOOTSTRAP_EMAIL
+    - AUTHENTIK_BOOTSTRAP_PASSWORD
     - WELCOME_MESSAGE
     - DEFAULT_LANGUAGE
     - EMAIL_SUBJECT
@@ -34,7 +35,7 @@ x-env: &env
 version: '3.8'
 services:
   app:
-    image: ghcr.io/goauthentik/server:2026.5.2
+    image: ghcr.io/goauthentik/server:2026.8.0
     command: server
     depends_on:
       - db
@@ -70,14 +71,14 @@ services:
         - "traefik.http.routers.${STACK_NAME}.middlewares=${STACK_NAME}-redirect,${STACK_NAME}-frameOptions,${STACK_NAME}-redirect"
         - "traefik.http.middlewares.${STACK_NAME}-frameOptions.headers.customFrameOptionsValue=SAMEORIGIN"
         - "traefik.http.middlewares.${STACK_NAME}-frameOptions.headers.contentSecurityPolicy=frame-ancestors ${X_FRAME_OPTIONS_ALLOW_FROM}"
-        - "coop-cloud.${STACK_NAME}.version=12.0.0+2026.5.2"
+        - "coop-cloud.${STACK_NAME}.version=12.1.0+2026.8.0"
         - "traefik.http.middlewares.${STACK_NAME}-redirect.redirectregex.regex=^https://(${REDIRECTS})/(.*)"
         - "traefik.http.middlewares.${STACK_NAME}-redirect.redirectregex.replacement=https://${DOMAIN}/$${2}"
         - "traefik.http.middlewares.${STACK_NAME}-redirect.redirectregex.permanent=true"
         - "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT}"
 
   worker:
-    image: ghcr.io/goauthentik/server:2026.5.2
+    image: ghcr.io/goauthentik/server:2026.8.0
     command: worker
     depends_on:
       - db
@@ -93,7 +94,6 @@ services:
     volumes:
       - data:/data
       - media:/media
-      - /dev/null:/blueprints/default/flow-oobe.yaml
       - templates:/templates
       - certs:/certs
     configs:

outline.yaml.tmpl

@@ -24,6 +24,7 @@ entries:
     - !Find [authentik_providers_oauth2.scopemapping, [scope_name, openid]]
     - !Find [authentik_providers_oauth2.scopemapping, [scope_name, email]]
     - !Find [authentik_providers_oauth2.scopemapping, [scope_name, profile]]
+    - !Find [authentik_providers_oauth2.scopemapping, [scope_name, offline_access]]
     signing_key: !Find [authentik_crypto.certificatekeypair, [name, authentik Self-signed Certificate]]
     sub_mode: hashed_user_id
     token_validity: days=30

release/12.0.1+2026.5.2

@@ -0,0 +1 @@
+adds admin group for kimai

release/12.0.3+2026.5.3

@@ -0,0 +1 @@
+blueprints: handle integrity exception when applying blueprints (cherry-pick #22599 to version-2026.5) (#22927)