{
  "slug": "authentik-helm",
  "kind": "helm",
  "metadata": {
    "name": "Authentik",
    "description": "Helm chart for Authentik, an open-source Identity Provider supporting OAuth2, SAML, and LDAP for flexible single sign-on and authentication.",
    "tags": [],
    "icon": {
      "provider": "selfhst",
      "id": "authentik"
    },
    "draft": false,
    "version": {
      "name": "2026.2.2",
      "source_dep_name": "ghcr.io/goauthentik/server",
      "source_dep_version": "2026.2.2"
    }
  },
  "variables": [
    {
      "title": "Networking",
      "name": "networking",
      "items": [
        {
          "name": "network_mode",
          "type": "str",
          "title": "Network Mode",
          "required": false,
          "default": "ClusterIP",
          "config": {
            "placeholder": "ClusterIP"
          }
        }
      ]
    },
    {
      "title": "Authentik Configuration",
      "name": "authentik",
      "items": [
        {
          "name": "authentik_secret_key",
          "type": "secret",
          "title": "Secret Key",
          "required": false,
          "config": {
            "autogenerated": {
              "kind": "base64",
              "bytes": 60
            }
          }
        },
        {
          "name": "authentik_log_level",
          "type": "enum",
          "title": "Authentik log level",
          "required": false,
          "default": "error",
          "config": {
            "options": [
              "trace",
              "debug",
              "info",
              "warning",
              "error"
            ]
          }
        },
        {
          "name": "authentik_error_reporting",
          "type": "bool",
          "title": "Error Reporting",
          "required": false,
          "default": false
        }
      ]
    },
    {
      "title": "Database Configuration",
      "name": "database",
      "items": [
        {
          "name": "database_external",
          "type": "bool",
          "title": "External Database",
          "required": false,
          "default": false
        },
        {
          "name": "database_host",
          "type": "str",
          "title": "Database host",
          "required": false,
          "default": "authentik-postgresql",
          "needs": [
            "database_external=true"
          ],
          "config": {
            "placeholder": "authentik-postgresql"
          }
        },
        {
          "name": "database_port",
          "type": "int",
          "title": "Database port",
          "required": false,
          "default": 5432,
          "needs": [
            "database_external=true"
          ],
          "config": {
            "placeholder": "5432"
          }
        },
        {
          "name": "database_name",
          "type": "str",
          "title": "Database name",
          "required": false,
          "default": "authentik",
          "config": {
            "placeholder": "authentik"
          }
        },
        {
          "name": "database_user",
          "type": "str",
          "title": "Database user",
          "required": false,
          "default": "authentik",
          "config": {
            "placeholder": "authentik"
          }
        },
        {
          "name": "database_password",
          "type": "secret",
          "title": "PostgreSQL database password",
          "required": false,
          "config": {
            "autogenerated": {
              "kind": "base64",
              "bytes": 36
            }
          }
        }
      ]
    },
    {
      "title": "Email Configuration",
      "name": "email",
      "items": [
        {
          "name": "email_enabled",
          "type": "bool",
          "title": "Email",
          "required": false,
          "default": false
        },
        {
          "name": "email_host",
          "type": "str",
          "title": "SMTP server hostname",
          "required": false,
          "config": {
            "placeholder": "smtp.home.arpa"
          }
        },
        {
          "name": "email_port",
          "type": "int",
          "title": "SMTP server port",
          "required": false,
          "default": 587,
          "config": {
            "placeholder": "587"
          }
        },
        {
          "name": "email_username",
          "type": "str",
          "title": "SMTP username",
          "required": false,
          "default": "",
          "config": {
            "placeholder": "user@example.com"
          }
        },
        {
          "name": "email_password",
          "type": "secret",
          "title": "SMTP password",
          "required": false,
          "default": ""
        },
        {
          "name": "email_from",
          "type": "str",
          "title": "From email address",
          "required": false,
          "config": {
            "placeholder": "authentik@home.arpa"
          }
        },
        {
          "name": "email_use_tls",
          "type": "bool",
          "title": "SMTP TLS",
          "required": false,
          "default": true
        }
      ]
    },
    {
      "title": "Traefik Configuration",
      "name": "traefik",
      "items": [
        {
          "name": "traefik_enabled",
          "type": "bool",
          "title": "Traefik",
          "required": false,
          "default": false
        },
        {
          "name": "traefik_host",
          "type": "str",
          "title": "Traefik hostname",
          "required": true,
          "config": {
            "placeholder": "authentik.home.arpa"
          }
        },
        {
          "name": "traefik_tls_enabled",
          "type": "bool",
          "title": "TLS",
          "required": false,
          "default": false
        },
        {
          "name": "traefik_tls_secret",
          "type": "str",
          "title": "TLS Secret",
          "required": false,
          "default": "authentik-tls",
          "config": {
            "placeholder": "authentik-tls"
          }
        },
        {
          "name": "traefik_tls_certmanager",
          "type": "bool",
          "title": "Cert Manager",
          "required": false,
          "default": false
        },
        {
          "name": "certmanager_issuer",
          "type": "str",
          "title": "Issuer",
          "required": false,
          "default": "letsencrypt-prod",
          "needs": [
            "traefik_tls_certmanager=true"
          ],
          "config": {
            "placeholder": "letsencrypt-prod"
          }
        }
      ]
    }
  ]
}