diff --git a/CHANGELOG.md b/CHANGELOG.md
index 87ebd5c..d37ebd1 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,12 @@
+# 2023-04-23
+
+## (Backward Compatibility Break) Authentik container variables renamed
+
+For the authentik role there wehre initially two containers: `authentic_worker_container` and `authentic_server_container`. To simnplifiy the setup this was reduced to one container.
+As the role is pretty young and to avoid confusion because of legacy and reverted design decisions all variables containing `authentik_server_container` will now start with authentik_container. This means you will have to renemae these variables in your `vars.yml` if you already use authentik. If you use a standard setup this only includes 
+
+* `authentic_server_container_additional_networks_custom` -> `authentik_container_additional_networks_custom`
+
 # 2023-03-29
 
 ## (Backward Compatibility Break) Firezone database renamed
diff --git a/group_vars/mash_servers b/group_vars/mash_servers
index 4788762..e47575c 100644
--- a/group_vars/mash_servers
+++ b/group_vars/mash_servers
@@ -572,17 +572,17 @@ authentik_server_systemd_required_services_list_auto: |
     ([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled and authentik_database_hostname == devture_postgres_identifier else [])
   }}
 
-authentik_server_container_additional_networks_auto: |
+authentik_container_additional_networks_auto: |
   {{
     ([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
     +
-    ([devture_postgres_container_network] if devture_postgres_enabled and authentik_database_hostname == devture_postgres_identifier and authentik_server_container_network != devture_postgres_container_network else [])
+    ([devture_postgres_container_network] if devture_postgres_enabled and authentik_database_hostname == devture_postgres_identifier and authentik_container_network != devture_postgres_container_network else [])
   }}
 
-authentik_server_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled }}"
-authentik_server_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
-authentik_server_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
-authentik_server_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
+authentik_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled }}"
+authentik_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
+authentik_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
+authentik_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
 
 ########################################################################
 #                                                                      #
diff --git a/requirements.yml b/requirements.yml
index ce75107..9684568 100644
--- a/requirements.yml
+++ b/requirements.yml
@@ -7,7 +7,7 @@
   version: v1.9.16-0
   name: appsmith
 - src: git+https://github.com/mother-of-all-self-hosting/ansible-role-authentik.git
-  version: v2023.4.1-4
+  version: v2023.4.1-9
   name: authentik
 - src: git+https://github.com/mother-of-all-self-hosting/ansible-role-aux.git
   version: v1.0.0-0