---
# Sovereign branding blueprint — applied automatically by Authentik on startup.
# Customises the default brand with the tenant name, logo, and colour scheme.
version: 1
metadata:
  name: Sovereign Tenant Branding
  labels:
    blueprints.goauthentik.io/description: Tenant branding configuration managed by Ansible
entries:
  - model: authentik_brands.brand
    state: present
    identifiers:
      domain: authentik-default
    attrs:
      branding_title: "{{ tenant_name }}"
{% if tenant_logo_local_path | default('') != '' %}
      branding_logo: /media/branding/logo.png
      branding_favicon: /media/branding/logo.png
{% endif %}
      branding_custom_css: |
        :root {
          --ak-accent: {{ tenant_primary_color | default('#fd4b2d') }};
        }