Update

2026-07-22 20:31:54 -04:00
parent daa8765e1c
commit 3d3b9097d5
8 changed files with 211 additions and 106 deletions
@@ -0,0 +1,28 @@
+# ============================================================
+# SYSTEM SETTINGS
+# ============================================================
+TZ=America/New_York
+PUID=1000
+PGID=1000
+DATA_PATH=/home/miker/docker/authentik
+
+# ============================================================
+# AUTHENTIK VERSION & PORTS
+# ============================================================
+AUTHENTIK_IMAGE=ghcr.io/goauthentik/server
+AUTHENTIK_TAG=2026.2.1
+COMPOSE_PORT_HTTP=9000
+COMPOSE_PORT_HTTPS=9443
+
+# ============================================================
+# DATABASE CREDENTIALS
+# ============================================================
+PG_DB=authentik
+PG_USER=authentik
+PG_PASS=GenerateSecurePasswordHere
+
+# ============================================================
+# SECURITY KEYS
+# ============================================================
+# Generate with: openssl rand -base64 36
+AUTHENTIK_SECRET_KEY=GenerateSecureSecretKeyHere
@@ -1,79 +1,79 @@
+# Authentik Identity & SSO Stack
 services:
  postgresql:
-    env_file:
-    - .env
+    image: docker.io/library/postgres:16-alpine
+    container_name: authentik-db
+    restart: unless-stopped
    environment:
-      POSTGRES_DB: ${PG_DB:-authentik}
-      POSTGRES_PASSWORD: ${PG_PASS:?database password required}
-      POSTGRES_USER: ${PG_USER:-authentik}
+      - POSTGRES_DB=${PG_DB:-authentik}
+      - POSTGRES_USER=${PG_USER:-authentik}
+      - POSTGRES_PASSWORD=${PG_PASS}
+      - TZ=${TZ}
+    volumes:
+      - ${DATA_PATH}/database:/var/lib/postgresql/data
    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -d $${POSTGRES_DB} -U $${POSTGRES_USER}"]
      interval: 30s
+      timeout: 5s
      retries: 5
      start_period: 20s
-      test:
-      - CMD-SHELL
-      - pg_isready -d $${POSTGRES_DB} -U $${POSTGRES_USER}
-      timeout: 5s
-    image: docker.io/library/postgres:16-alpine
-    restart: unless-stopped
-    volumes:
-    - /home/miker/docker/authentik/database:/var/lib/postgresql/data
    networks:
      - authentik

  server:
+    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2026.2.1}
+    container_name: authentik-server
+    restart: unless-stopped
    command: server
+    environment:
+      - AUTHENTIK_POSTGRESQL__HOST=postgresql
+      - AUTHENTIK_POSTGRESQL__NAME=${PG_DB:-authentik}
+      - AUTHENTIK_POSTGRESQL__USER=${PG_USER:-authentik}
+      - AUTHENTIK_POSTGRESQL__PASSWORD=${PG_PASS}
+      - AUTHENTIK_SECRET_KEY=${AUTHENTIK_SECRET_KEY}
+      - TZ=${TZ}
+    volumes:
+      - ${DATA_PATH}/data:/data
+      - ${DATA_PATH}/custom-templates:/templates
+    ports:
+      - "${COMPOSE_PORT_HTTP}:9000"
+      - "${COMPOSE_PORT_HTTPS}:9443"
+    shm_size: 512mb
    depends_on:
      postgresql:
        condition: service_healthy
-    env_file:
-    - .env
-    environment:
-      AUTHENTIK_POSTGRESQL__HOST: postgresql
-      AUTHENTIK_POSTGRESQL__NAME: ${PG_DB:-authentik}
-      AUTHENTIK_POSTGRESQL__PASSWORD: ${PG_PASS}
-      AUTHENTIK_POSTGRESQL__USER: ${PG_USER:-authentik}
-      AUTHENTIK_SECRET_KEY: ${AUTHENTIK_SECRET_KEY:?secret key required}
-    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2026.2.1}
-    ports:
-    - ${COMPOSE_PORT_HTTP}:9000
-    - ${COMPOSE_PORT_HTTPS}:9443
-    restart: unless-stopped
-    shm_size: 512mb
-    volumes:
-    - /home/miker/docker/authentik/data:/data
-    - /home/miker/docker/authentik/custom-templates:/templates
    networks:
      - authentik
      - main

  worker:
+    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2026.2.1}
+    container_name: authentik-worker
+    restart: unless-stopped
    command: worker
+    user: root
+    environment:
+      - AUTHENTIK_POSTGRESQL__HOST=postgresql
+      - AUTHENTIK_POSTGRESQL__NAME=${PG_DB:-authentik}
+      - AUTHENTIK_POSTGRESQL__USER=${PG_USER:-authentik}
+      - AUTHENTIK_POSTGRESQL__PASSWORD=${PG_PASS}
+      - AUTHENTIK_SECRET_KEY=${AUTHENTIK_SECRET_KEY}
+      - TZ=${TZ}
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock
+      - ${DATA_PATH}/data:/data
+      - ${DATA_PATH}/certs:/certs
+      - ${DATA_PATH}/custom-templates:/templates
+    shm_size: 512mb
    depends_on:
      postgresql:
        condition: service_healthy
-    env_file:
-    - .env
-    environment:
-      AUTHENTIK_POSTGRESQL__HOST: postgresql
-      AUTHENTIK_POSTGRESQL__NAME: ${PG_DB:-authentik}
-      AUTHENTIK_POSTGRESQL__PASSWORD: ${PG_PASS}
-      AUTHENTIK_POSTGRESQL__USER: ${PG_USER:-authentik}
-      AUTHENTIK_SECRET_KEY: ${AUTHENTIK_SECRET_KEY:?secret key required}
-    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2026.2.1}
-    restart: unless-stopped
-    shm_size: 512mb
-    user: root
-    volumes:
-    - /var/run/docker.sock:/var/run/docker.sock
-    - /home/miker/docker/authentik/data:/data
-    - /home/miker/docker/authentik/certs:/certs
-    - /home/miker/docker/authentik/custom-templates:/templates
    networks:
      - authentik
      - main
+
 networks:
  main:
-    external: true    # Tells Compose not to create this network
+    external: true
  authentik:
-    external: true    # Tells Compose not to create this network
+    external: true