{
  "slug": "authentik-compose",
  "kind": "compose",
  "metadata": {
    "name": "Authentik",
    "description": "Open-source Identity Provider (IdP) that supports OAuth2, SAML, LDAP, and SCIM for single sign-on and user authentication across your applications.",
    "tags": [
      "traefik",
      "volume"
    ],
    "icon": {
      "provider": "selfhst",
      "id": "authentik",
      "color": "default"
    },
    "draft": false,
    "version": {
      "name": "2026.2.2"
    }
  },
  "variables": [
    {
      "name": "general",
      "title": "General",
      "items": [
        {
          "name": "service_name",
          "type": "str",
          "title": "Service Name",
          "required": false,
          "default": "authentik",
          "config": {
            "placeholder": "authentik"
          }
        },
        {
          "name": "restart_policy",
          "type": "enum",
          "title": "Restart Policy",
          "required": true,
          "default": "unless-stopped",
          "config": {
            "options": [
              "unless-stopped",
              "always",
              "on-failure",
              "no"
            ]
          }
        }
      ]
    },
    {
      "name": "database",
      "title": "Database",
      "items": [
        {
          "name": "database_password",
          "type": "secret",
          "title": "Database password",
          "required": true,
          "config": {
            "autogenerated": {}
          }
        },
        {
          "name": "database_user",
          "type": "str",
          "title": "The database user",
          "required": false,
          "default": "authentik",
          "config": {
            "placeholder": "authentik"
          }
        },
        {
          "name": "database_name",
          "type": "str",
          "title": "The database name",
          "required": false,
          "default": "authentik",
          "config": {
            "placeholder": "authentik"
          }
        },
        {
          "name": "database_external",
          "type": "bool",
          "title": "External Database",
          "required": false,
          "default": false
        },
        {
          "name": "database_host",
          "type": "str",
          "title": "External database host",
          "required": false,
          "default": "",
          "needs": [
            "database_external=true"
          ],
          "config": {
            "placeholder": "postgres.home.arpa"
          }
        },
        {
          "name": "database_port",
          "type": "int",
          "title": "External database port",
          "required": false,
          "default": 5432,
          "config": {
            "placeholder": "5432"
          },
          "needs": [
            "database_external=true"
          ]
        }
      ]
    },
    {
      "name": "ports",
      "title": "Ports",
      "items": [
        {
          "name": "ports_http",
          "type": "str",
          "title": "HTTP Port",
          "required": false,
          "default": 8000,
          "config": {
            "placeholder": "8000"
          }
        },
        {
          "name": "ports_https",
          "type": "str",
          "title": "HTTPS Port",
          "required": false,
          "default": 8443,
          "config": {
            "placeholder": "8443"
          }
        }
      ]
    },
    {
      "name": "traefik",
      "title": "Traefik",
      "toggle": "traefik_enabled",
      "items": [
        {
          "name": "traefik_enabled",
          "type": "bool",
          "title": "Traefik",
          "required": false,
          "default": false
        },
        {
          "name": "traefik_host",
          "type": "str",
          "title": "Host",
          "required": true,
          "config": {
            "placeholder": "authentik"
          }
        },
        {
          "name": "traefik_domain",
          "type": "str",
          "title": "Domain",
          "required": true,
          "config": {
            "placeholder": "home.arpa"
          }
        },
        {
          "name": "traefik_entrypoint",
          "type": "str",
          "title": "Entrypoint",
          "required": true,
          "default": "web",
          "config": {
            "placeholder": "web"
          }
        },
        {
          "name": "traefik_network",
          "type": "str",
          "title": "Network",
          "required": true,
          "default": "traefik",
          "config": {
            "placeholder": "traefik"
          }
        },
        {
          "name": "traefik_tls_enabled",
          "type": "bool",
          "title": "TLS",
          "required": false,
          "default": false
        },
        {
          "name": "traefik_tls_entrypoint",
          "type": "str",
          "title": "TLS Entrypoint",
          "required": true,
          "default": "websecure",
          "config": {
            "placeholder": "websecure"
          },
          "needs": [
            "traefik_tls_enabled=true"
          ]
        },
        {
          "name": "traefik_tls_certresolver",
          "type": "str",
          "title": "Cert Resolver",
          "required": true,
          "default": "cloudflare",
          "config": {
            "placeholder": "cloudflare"
          },
          "needs": [
            "traefik_tls_enabled=true"
          ]
        }
      ]
    },
    {
      "name": "authentik",
      "title": "Authentik",
      "items": [
        {
          "name": "authentik_secret_key",
          "type": "secret",
          "title": "Secret Key",
          "required": true,
          "config": {
            "autogenerated": {}
          }
        },
        {
          "name": "authentik_admin_password",
          "type": "secret",
          "title": "Admin Password",
          "required": false,
          "config": {
            "autogenerated": {}
          }
        },
        {
          "name": "authentik_error_reporting",
          "type": "bool",
          "title": "Error Reporting",
          "required": false
        }
      ]
    },
    {
      "name": "volume",
      "title": "Volume",
      "items": [
        {
          "name": "volume_mode",
          "type": "enum",
          "title": "Volume Mode",
          "required": true,
          "default": "local",
          "config": {
            "options": [
              "local",
              "mount",
              "nfs"
            ]
          }
        },
        {
          "name": "volume_mount_path",
          "type": "str",
          "title": "Volume Mount Path",
          "required": true,
          "default": "/data",
          "config": {
            "placeholder": "/data"
          },
          "needs": [
            "volume_mode=mount"
          ]
        },
        {
          "name": "volume_nfs_server",
          "type": "str",
          "title": "Volume Nfs Server",
          "required": true,
          "default": "NFS_SERVER",
          "config": {
            "placeholder": "NFS_SERVER"
          },
          "needs": [
            "volume_mode=nfs"
          ]
        },
        {
          "name": "volume_nfs_path",
          "type": "str",
          "title": "Volume Nfs Path",
          "required": true,
          "default": "/export",
          "config": {
            "placeholder": "/export"
          },
          "needs": [
            "volume_mode=nfs"
          ]
        },
        {
          "name": "volume_nfs_options",
          "type": "str",
          "title": "Volume Nfs Options",
          "required": true,
          "default": "rw,nolock,soft",
          "config": {
            "placeholder": "rw,nolock,soft"
          },
          "needs": [
            "volume_mode=nfs"
          ]
        }
      ]
    },
    {
      "name": "email",
      "title": "Email",
      "toggle": "email_enabled",
      "items": [
        {
          "name": "email_host",
          "type": "str",
          "title": "SMTP server hostname",
          "required": true,
          "config": {
            "placeholder": "smtp.home.arpa"
          }
        },
        {
          "name": "email_port",
          "type": "int",
          "title": "SMTP server port",
          "required": true,
          "default": 25,
          "config": {
            "placeholder": "25"
          }
        },
        {
          "name": "email_username",
          "type": "str",
          "title": "SMTP username",
          "required": true,
          "config": {
            "placeholder": "user@example.com"
          }
        },
        {
          "name": "email_password",
          "type": "secret",
          "title": "SMTP password",
          "required": true
        },
        {
          "name": "email_from",
          "type": "str",
          "title": "From email address",
          "required": true,
          "config": {
            "placeholder": "noreply@example.com"
          }
        },
        {
          "name": "email_enabled",
          "type": "bool",
          "title": "Email",
          "required": false,
          "default": false
        },
        {
          "name": "email_encryption",
          "type": "str",
          "title": "Encryption",
          "required": false,
          "default": "tls",
          "config": {
            "placeholder": "tls"
          }
        }
      ]
    }
  ]
}