Promote authentik_dev to authentik, bump to 2026.8.3, add redis

Renames the stack to drop the _dev suffix now that it's production-ready.
Bumps AUTHENTIK_TAG from 2025.10.1 to 2026.8.3, adds the redis service
required by the authentik server/worker (was missing entirely), and
fixes stale/duplicated lines in the README.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

authentik/compose.yaml

@@ -0,0 +1,70 @@
+services:
+  redis:
+    image: ${AUTHENTIK_REDIS_IMAGE:-redis:alpine}
+    restart: ${AUTHENTIK_RESTART:-unless-stopped}
+    volumes:
+      - ${VOL_PATH:-/data}/authentik/redis:/data
+    networks:
+      - internal
+
+  postgresql:
+    image: ${AUTHENTIK_POSTGRES_IMAGE:-postgres:16-alpine}
+    restart: ${AUTHENTIK_RESTART:-unless-stopped}
+    volumes:
+      - ${VOL_PATH:-/data}/authentik/db:/var/lib/postgresql/data
+    environment:
+      - POSTGRES_DB=${PG_DB:-authentik}
+      - POSTGRES_PASSWORD=${PG_PASS:?database password required}
+      - POSTGRES_USER=${PG_USER:-authentik}
+    networks:
+      - internal
+
+  server:
+    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2026.8.3}
+    restart: ${AUTHENTIK_RESTART:-unless-stopped}
+    volumes:
+      - ${VOL_PATH:-/data}/authentik/media:/media
+      - ${VOL_PATH:-/data}/authentik/custom-templates:/templates
+    environment:
+      - AUTHENTIK_POSTGRESQL__HOST=postgresql
+      - AUTHENTIK_POSTGRESQL__NAME=${PG_DB:-authentik}
+      - AUTHENTIK_POSTGRESQL__PASSWORD=${PG_PASS}
+      - AUTHENTIK_POSTGRESQL__USER=${PG_USER:-authentik}
+      - AUTHENTIK_REDIS__HOST=redis
+      - AUTHENTIK_SECRET_KEY=${AUTHENTIK_SECRET_KEY:?secret key required}
+    ports:
+      - "${AUTHENTIK_PORT_HTTP:-9000}:9000"
+      - "${AUTHENTIK_PORT_HTTPS:-9443}:9443"
+    networks:
+      - proxy
+      - internal
+    depends_on:
+      - postgresql
+      - redis
+    command: server
+
+  worker:
+    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2026.8.3}
+    restart: ${AUTHENTIK_RESTART:-unless-stopped}
+    volumes:
+      - ${VOL_PATH:-/data}/authentik/media:/media
+      - ${VOL_PATH:-/data}/authentik/certs:/certs
+      - ${VOL_PATH:-/data}/authentik/custom-templates:/templates
+    environment:
+      - AUTHENTIK_POSTGRESQL__HOST=postgresql
+      - AUTHENTIK_POSTGRESQL__NAME=${PG_DB:-authentik}
+      - AUTHENTIK_POSTGRESQL__PASSWORD=${PG_PASS}
+      - AUTHENTIK_POSTGRESQL__USER=${PG_USER:-authentik}
+      - AUTHENTIK_REDIS__HOST=redis
+      - AUTHENTIK_SECRET_KEY=${AUTHENTIK_SECRET_KEY:?secret key required}
+    networks:
+      - internal
+    depends_on:
+      - postgresql
+      - redis
+    command: worker
+
+networks:
+  proxy:
+    external: true
+  internal: