68c8ec79e1
The public authentik gateway (identity.unkin.net) now uses traefik-external and removes external-dns management, matching the arrproxy external gateway convention. DNS remains managed out-of-band via bind-operator. The internal authentik-internal gateway stays on traefik-internal.