RAC failed to setup connection

**Describe your question/**
how to use RAC with external outpost

**Relevant info**
2025.6.4

**Screenshots**

**Logs**
````
rac_outpost_1 | {"event":"Loaded config","level":"debug","path":"inbuilt-default","timestamp":"2025-08-14T09:09:42Z"}
rac_outpost_1 | {"event":"Loaded config from environment","level":"debug","timestamp":"2025-08-14T09:09:42Z"}
rac_outpost_1 | {"event":"Fetched outpost configuration","level":"debug","logger":"authentik.outpost.ak-api-controller","name":"rdp-office","timestamp":"2025-08-14T09:09:42Z"}
rac_outpost_1 | {"event":"Fetched global configuration","level":"debug","logger":"authentik.outpost.ak-api-controller","timestamp":"2025-08-14T09:09:42Z"}
rac_outpost_1 | {"event":"HA Reload offset","level":"debug","logger":"authentik.outpost.ak-api-controller","offset":"5s","timestamp":"2025-08-14T09:09:42Z"}
rac_outpost_1 | {"event":"connecting to websocket","level":"debug","logger":"authentik.outpost.ak-api-controller","timestamp":"2025-08-14T09:09:42Z","url":"wss://auth.test.domain.io/ws/outpost/db9a39fd-ddf1-4d68-b025-c147a839ce0d/?instance_uuid=0a84c625-9c62-4e2f-91b0-4ae553072e1e"}
rac_outpost_1 | {"event":"Successfully connected websocket","level":"info","logger":"authentik.outpost.ak-ws","outpost":"db9a39fd-ddf1-4d68-b025-c147a839ce0d","timestamp":"2025-08-14T09:09:42Z"}
rac_outpost_1 | {"event":"Enabled USR1 hook to reload","level":"debug","logger":"authentik.outpost.ak-api-controller","timestamp":"2025-08-14T09:09:42Z"}
rac_outpost_1 | {"event":"starting guacd","level":"info","logger":"authentik.outpost.rac","timestamp":"2025-08-14T09:09:42Z"}
rac_outpost_1 | {"event":"Starting Interval updater...","level":"debug","logger":"authentik.outpost.ak-api-controller","timestamp":"2025-08-14T09:09:42Z"}
rac_outpost_1 | {"event":"Running interval update","level":"debug","logger":"authentik.outpost.ak-api-controller","loop":"interval-updater","timestamp":"2025-08-14T09:09:42Z"}
rac_outpost_1 | {"event":"Starting WS Handler...","level":"debug","logger":"authentik.outpost.ak-api-controller","timestamp":"2025-08-14T09:09:42Z"}
rac_outpost_1 | {"event":"Starting periodical timer...","level":"debug","logger":"authentik.outpost.ak-api-controller","timestamp":"2025-08-14T09:09:42Z"}
rac_outpost_1 | {"event":"Starting Metrics server","level":"info","listen":"0.0.0.0:9300","logger":"authentik.outpost.metrics","timestamp":"2025-08-14T09:09:42Z"}
rac_outpost_1 | {"event":"Starting WS Health notifier...","level":"debug","logger":"authentik.outpost.ak-api-controller","timestamp":"2025-08-14T09:09:42Z"}
rac_outpost_1 | {"event":"hello'd","level":"trace","logger":"authentik.outpost.ak-api-controller","loop":"ws-health","timestamp":"2025-08-14T09:09:42Z"}
rac_outpost_1 | {"event":"Invalid log level. Valid levels are: \"trace\", \"debug\", \"info\", \"warning\", and \"error\".","level":"info","logger":"authentik.outpost.rac.guacd","timestamp":"2025-08-14T09:09:42Z"}
rac_outpost_1 | {"event":"Fetched outpost configuration","level":"debug","logger":"authentik.outpost.ak-api-controller","name":"rdp-office","timestamp":"2025-08-14T09:09:42Z"}
rac_outpost_1 | {"event":"Starting authentik outpost","hash":"tagged","level":"info","logger":"authentik.outpost","timestamp":"2025-08-14T09:09:42Z","version":"2025.6.4"}
rac_outpost_1 | {"error":"dial tcp 0.0.0.0:4822: connect: connection refused","event":"failed to setup connection","level":"warning","logger":"authentik.outpost.rac","timestamp":"2025-08-14T09:10:14Z"}
````

**Version and Deployment (please complete the following information):**

- authentik version: 2025.6.4
- Deployment: docker-compose

**Additional context**
docker-compose outpost

````
services:
rac_outpost:
image: ghcr.io/goauthentik/rac:2025.6
# Optionally specify which networks the container should be
# might be needed to reach the core authentik server
# networks:
# - foo
ports:
- 9300:9300
environment:
AUTHENTIK_HOST: https://auth.test.domain.io
AUTHENTIK_INSECURE: "true"
AUTHENTIK_TOKEN: asd
AUTHENTIK_LOG_LEVEL: trace
````

I set it up as described in the tutorial.

The error dial tcp 0.0.0.0:4822: connect: connection refused

just doesn't make sense to me. Where does it want to connect to port 4822?

The remote hosts are also accessible from the container. I entered the container via exec and was able to reach all hosts.
According to the logs, the outpost also has a connection to the authentication server; there are also logs as soon as you try to connect.

Whether ssh or rdp makes no difference.

I tried different hosts, Ubuntu desktop/Windows via rdp

other Ubuntu clients via ssh

thanks for your help