todo items

cli/TODO.md

@@ -1,3 +1,11 @@
 # TODO ITEMS
 
-* Consider creating a "secret" variable type that automatically handles sensitive data and masks input during prompts, which also should be set via .env file and not directly in the compose files or other templates.
+* Consider creating a "secret" variable type that automatically handles sensitive data and masks input during prompts, which also should be set via .env file and not directly in the compose files or other templates.
+  * Implement multi-file support for templates, allowing jinja2 in other files as well
+  * Mask secrets in rendering output (e.g. when displaying the final docker-compose file, mask secret values)
+  * Add support for --out to specify a directory
+* Add support for more complex validation rules for environment variables, such as regex patterns or value ranges.
+* Add configuration support to allow users to override module and template spec with their own (e.g. defaults -> compose -> spec -> general ...)
+* Add an installation script when cloning the repo and setup necessary commands
+* Add an automatic update script to keep the tool up-to-date with the latest version from the repository.
+* Add compose deploy command to deploy a generated compose project to a local or remote docker environment

library/compose/authentik/compose.yaml

@@ -34,6 +34,11 @@ spec:
         default: false
   database:
     required: true
+    vars:
+      database_external:
+        description: "Use an external database (if true, the internal postgres service will not be created)"
+        type: bool
+        default: false
   email:
     vars:
       email_timeout:
@@ -158,6 +163,7 @@ services:
     {% endif %}
     restart: {{ restart_policy | default('unless-stopped') }}
 
+  {{ if not database_external }}
   {{ service_name | default('authentik') }}-postgres:
     image: docker.io/library/postgres:17.6
     container_name: {{ service_name | default('authentik') }}-db
@@ -179,6 +185,7 @@ services:
       - {{ network_name | default('bridge') }}
     {% endif %}
     restart: {{ restart_policy | default('unless-stopped') }}
+  {{ endif }}
 
 volumes:
   database_data: