feat: update environment configuration and secrets management

.env

@@ -0,0 +1,30 @@
+# Deployment identity
+COMPOSE_PROJECT_NAME=sso-s1q-dev
+PUBLIC_DOMAIN=sso.s1q.dev
+TLS_DOMAIN=*.s1q.dev
+
+# Authentik logging and error reporting
+AUTHENTIK_ERROR_REPORTING__ENABLED=false
+AUTHENTIK_LOG_LEVEL=info
+
+# Authentik database configuration
+AUTHENTIK_POSTGRESQL__HOST=sbx0db00.int.s1q.dev
+AUTHENTIK_POSTGRESQL__PORT=5432
+AUTHENTIK_POSTGRESQL__SSLMODE=verify-full
+AUTHENTIK_POSTGRESQL__SSLROOTCERT=/etc/ssl/certs/ca-certificates.crt
+
+# Email
+AUTHENTIK_EMAIL__HOST=mail.s1q.dev
+AUTHENTIK_EMAIL__PORT=25
+AUTHENTIK_EMAIL__USERNAME=smtp@s1q.dev
+AUTHENTIK_EMAIL__USE_TLS=true
+AUTHENTIK_EMAIL__USE_SSL=false
+AUTHENTIK_EMAIL__TIMEOUT=10
+AUTHENTIK_EMAIL__FROM=sso@s1q.dev
+
+# MaxMind GeoIP
+GEOIPUPDATE_ACCOUNT_ID=765001
+
+# PostgreSQL
+PG_USER=authentik
+PG_DB=authentik