From 855a24a8502dbb557fda35829f486653149ec8d3 Mon Sep 17 00:00:00 2001
From: traveler <traveler@wasted-bandwidth.net>
Date: Wed, 29 Apr 2026 15:12:59 -0500
Subject: [PATCH] gremlin: auto-fix swarm/authentik.yaml (5 issues fixed)

  - Added default restart_policy for "postgresql"
  - Added aarch64 exclusion for "postgresql"
  - Added arm exclusion for "postgresql"
  - Stamped gremlin.version: 2026-04-1
  - Added diun.enable: "true" to "postgresql"
---
 swarm/authentik.yaml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/swarm/authentik.yaml b/swarm/authentik.yaml
index 19eedcf..9be9f94 100644
--- a/swarm/authentik.yaml
+++ b/swarm/authentik.yaml
@@ -17,10 +17,18 @@ services:
     networks:
       - authentik
     deploy:
+      restart_policy:
+        condition: any
+        delay: 5s
+        max_attempts: 3
+        window: 120s
       placement:
         constraints:
+          - node.platform.arch != arm
+          - node.platform.arch != aarch64
           - node.hostname == znas
       labels:
+        gremlin.version: "2026-04-1"
         gremlin.uid.exempt: "true"
         gremlin.uid.reason: "Postgres manages its own internal users"
         gremlin.caddy.skip: "true"
@@ -92,6 +100,7 @@ services:
         homepage.icon: authentik.png
         homepage.href: https://auth.netgrimoire.com
         homepage.description: Account Manager
+        diun.enable: "true"
 
         monitor.name: Authentik
         monitor.url: https://auth.netgrimoire.com