Authentik needs a certificate for all sorts of signing. By default, this is a self-signed certificate from authentik. This has made some problems, i.e. the wp extension we use tries to verify the integrity of the ssl cert which it cannot when authentik self-signs. This can easily be remedied when we add a small certbot that feeds authentik a lets-encrypt cert for that reason. See https://goauthentik.io/docs/core/certificates/.
Authentik needs a certificate for all sorts of signing. By default, this is a self-signed certificate from authentik. This has made some problems, i.e. the wp extension we use tries to verify the integrity of the ssl cert which it cannot when authentik self-signs. This can easily be remedied when we add a small certbot that feeds authentik a lets-encrypt cert for that reason. See https://goauthentik.io/docs/core/certificates/.