misc: actualbudget, authentik, headscale, rybbit, terminal, dbaas updates

- actualbudget: adjust resource config
- authentik: add configuration
- headscale: minor fix
- rybbit: add resources
- terminal: add terminal stack config
- platform/dbaas: add config
- infra: update lock file

stacks/authentik/modules/authentik/main.tf

@@ -16,6 +16,13 @@ module "tls_secret" {
   tls_secret_name = var.tls_secret_name
 }
 
+# The embedded outpost auto-creates an ingress expecting this secret name
+module "tls_secret_outpost" {
+  source          = "../../../../modules/kubernetes/setup_tls_secret"
+  namespace       = kubernetes_namespace.authentik.metadata[0].name
+  tls_secret_name = "authentik-outpost-tls"
+}
+
 resource "kubernetes_namespace" "authentik" {
   metadata {
     name = "authentik"