mirror of
https://github.com/nickyeoman/docker-compose-cookbooks.git
synced 2026-09-24 09:26:23 +00:00
Promote authentik_dev to authentik, bump to 2026.8.3, add redis
Renames the stack to drop the _dev suffix now that it's production-ready. Bumps AUTHENTIK_TAG from 2025.10.1 to 2026.8.3, adds the redis service required by the authentik server/worker (was missing entirely), and fixes stale/duplicated lines in the README. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
This commit is contained in:
@@ -10,7 +10,7 @@ Identity provider and SSO platform supporting OIDC, SAML, LDAP, and proxy authen
|
|||||||
|
|
||||||
## Project Details
|
## Project Details
|
||||||
|
|
||||||
- **Container Image:** [ghcr.io/goauthentik/server:2025.10.1](https://github.com/goauthentik/server)
|
- **Container Image:** [ghcr.io/goauthentik/server:2026.8.3](https://github.com/goauthentik/server)
|
||||||
- **Reverse Proxy Port:** `9000`
|
- **Reverse Proxy Port:** `9000`
|
||||||
|
|
||||||
## Getting Started
|
## Getting Started
|
||||||
@@ -23,7 +23,7 @@ Identity provider and SSO platform supporting OIDC, SAML, LDAP, and proxy authen
|
|||||||
|
|
||||||
PG_DB – default: authentik
|
PG_DB – default: authentik
|
||||||
PG_USER – default: authentik
|
PG_USER – default: authentik
|
||||||
AUTHENTIK_TAG – default: 2025.10.1
|
AUTHENTIK_TAG – default: 2026.8.3
|
||||||
PG_PASS – default: (none, must be set)
|
PG_PASS – default: (none, must be set)
|
||||||
AUTHENTIK_PORT_HTTP – default: 9000
|
AUTHENTIK_PORT_HTTP – default: 9000
|
||||||
AUTHENTIK_PORT_HTTPS – default: 9443
|
AUTHENTIK_PORT_HTTPS – default: 9443
|
||||||
@@ -31,11 +31,10 @@ Identity provider and SSO platform supporting OIDC, SAML, LDAP, and proxy authen
|
|||||||
## Volume Notes
|
## Volume Notes
|
||||||
|
|
||||||
/var/lib/postgresql/data – host path /data/authentik/db
|
/var/lib/postgresql/data – host path /data/authentik/db
|
||||||
|
/data (redis) – host path /data/authentik/redis
|
||||||
/media – host path /data/authentik/media
|
/media – host path /data/authentik/media
|
||||||
/templates – host path /data/authentik/custom-templates
|
/templates – host path /data/authentik/custom-templates
|
||||||
/media – host path /data/authentik/media
|
|
||||||
/certs – host path /data/authentik/certs
|
/certs – host path /data/authentik/certs
|
||||||
/templates – host path /data/authentik/custom-templates
|
|
||||||
|
|
||||||
## Network Notes
|
## Network Notes
|
||||||
|
|
||||||
@@ -49,11 +48,11 @@ docker run -d \
|
|||||||
-p 9000:9000 \
|
-p 9000:9000 \
|
||||||
-p 9443:9443 \
|
-p 9443:9443 \
|
||||||
-v /data/authentik/db:/var/lib/postgresql/data \
|
-v /data/authentik/db:/var/lib/postgresql/data \
|
||||||
|
-v /data/authentik/redis:/data \
|
||||||
-v /data/authentik/media:/media \
|
-v /data/authentik/media:/media \
|
||||||
-v /data/authentik/custom-templates:/templates \
|
-v /data/authentik/custom-templates:/templates \
|
||||||
-v /data/authentik/media:/media \
|
|
||||||
-v /data/authentik/certs:/certs \
|
-v /data/authentik/certs:/certs \
|
||||||
ghcr.io/goauthentik/server:2025.10.1
|
ghcr.io/goauthentik/server:2026.8.3
|
||||||
```
|
```
|
||||||
|
|
||||||
See compose.yaml for the full set of environment variables.
|
See compose.yaml for the full set of environment variables.
|
||||||
@@ -65,10 +64,10 @@ Nothing specific to this stack so far.
|
|||||||
## Dockhand Stack, Deploy from Git
|
## Dockhand Stack, Deploy from Git
|
||||||
|
|
||||||
Cookbooks Repository
|
Cookbooks Repository
|
||||||
stackname: authentik_dev
|
stackname: authentik
|
||||||
Compose file path: authentik_dev/compose.yaml
|
Compose file path: authentik/compose.yaml
|
||||||
Additional env file (optional): authentik_dev/sample.env
|
Additional env file (optional): authentik/sample.env
|
||||||
|
|
||||||
Then "Load" authentik_dev/sample.env into the Environmental variables in dockhand
|
Then "Load" authentik/sample.env into the Environmental variables in dockhand
|
||||||
|
|
||||||
Create the Stack
|
Create the Stack
|
||||||
@@ -1,4 +1,12 @@
|
|||||||
services:
|
services:
|
||||||
|
redis:
|
||||||
|
image: ${AUTHENTIK_REDIS_IMAGE:-redis:alpine}
|
||||||
|
restart: ${AUTHENTIK_RESTART:-unless-stopped}
|
||||||
|
volumes:
|
||||||
|
- ${VOL_PATH:-/data}/authentik/redis:/data
|
||||||
|
networks:
|
||||||
|
- internal
|
||||||
|
|
||||||
postgresql:
|
postgresql:
|
||||||
image: ${AUTHENTIK_POSTGRES_IMAGE:-postgres:16-alpine}
|
image: ${AUTHENTIK_POSTGRES_IMAGE:-postgres:16-alpine}
|
||||||
restart: ${AUTHENTIK_RESTART:-unless-stopped}
|
restart: ${AUTHENTIK_RESTART:-unless-stopped}
|
||||||
@@ -12,7 +20,7 @@ services:
|
|||||||
- internal
|
- internal
|
||||||
|
|
||||||
server:
|
server:
|
||||||
image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2025.10.1}
|
image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2026.8.3}
|
||||||
restart: ${AUTHENTIK_RESTART:-unless-stopped}
|
restart: ${AUTHENTIK_RESTART:-unless-stopped}
|
||||||
volumes:
|
volumes:
|
||||||
- ${VOL_PATH:-/data}/authentik/media:/media
|
- ${VOL_PATH:-/data}/authentik/media:/media
|
||||||
@@ -22,6 +30,7 @@ services:
|
|||||||
- AUTHENTIK_POSTGRESQL__NAME=${PG_DB:-authentik}
|
- AUTHENTIK_POSTGRESQL__NAME=${PG_DB:-authentik}
|
||||||
- AUTHENTIK_POSTGRESQL__PASSWORD=${PG_PASS}
|
- AUTHENTIK_POSTGRESQL__PASSWORD=${PG_PASS}
|
||||||
- AUTHENTIK_POSTGRESQL__USER=${PG_USER:-authentik}
|
- AUTHENTIK_POSTGRESQL__USER=${PG_USER:-authentik}
|
||||||
|
- AUTHENTIK_REDIS__HOST=redis
|
||||||
- AUTHENTIK_SECRET_KEY=${AUTHENTIK_SECRET_KEY:?secret key required}
|
- AUTHENTIK_SECRET_KEY=${AUTHENTIK_SECRET_KEY:?secret key required}
|
||||||
ports:
|
ports:
|
||||||
- "${AUTHENTIK_PORT_HTTP:-9000}:9000"
|
- "${AUTHENTIK_PORT_HTTP:-9000}:9000"
|
||||||
@@ -31,10 +40,11 @@ services:
|
|||||||
- internal
|
- internal
|
||||||
depends_on:
|
depends_on:
|
||||||
- postgresql
|
- postgresql
|
||||||
|
- redis
|
||||||
command: server
|
command: server
|
||||||
|
|
||||||
worker:
|
worker:
|
||||||
image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2025.10.1}
|
image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2026.8.3}
|
||||||
restart: ${AUTHENTIK_RESTART:-unless-stopped}
|
restart: ${AUTHENTIK_RESTART:-unless-stopped}
|
||||||
volumes:
|
volumes:
|
||||||
- ${VOL_PATH:-/data}/authentik/media:/media
|
- ${VOL_PATH:-/data}/authentik/media:/media
|
||||||
@@ -45,11 +55,13 @@ services:
|
|||||||
- AUTHENTIK_POSTGRESQL__NAME=${PG_DB:-authentik}
|
- AUTHENTIK_POSTGRESQL__NAME=${PG_DB:-authentik}
|
||||||
- AUTHENTIK_POSTGRESQL__PASSWORD=${PG_PASS}
|
- AUTHENTIK_POSTGRESQL__PASSWORD=${PG_PASS}
|
||||||
- AUTHENTIK_POSTGRESQL__USER=${PG_USER:-authentik}
|
- AUTHENTIK_POSTGRESQL__USER=${PG_USER:-authentik}
|
||||||
|
- AUTHENTIK_REDIS__HOST=redis
|
||||||
- AUTHENTIK_SECRET_KEY=${AUTHENTIK_SECRET_KEY:?secret key required}
|
- AUTHENTIK_SECRET_KEY=${AUTHENTIK_SECRET_KEY:?secret key required}
|
||||||
networks:
|
networks:
|
||||||
- internal
|
- internal
|
||||||
depends_on:
|
depends_on:
|
||||||
- postgresql
|
- postgresql
|
||||||
|
- redis
|
||||||
command: worker
|
command: worker
|
||||||
|
|
||||||
networks:
|
networks:
|
||||||
@@ -1,11 +1,12 @@
|
|||||||
# Compose
|
# Compose
|
||||||
VOL_PATH=/data
|
VOL_PATH=/data
|
||||||
AUTHENTIK_IMAGE=ghcr.io/goauthentik/server
|
AUTHENTIK_IMAGE=ghcr.io/goauthentik/server
|
||||||
AUTHENTIK_TAG=2025.10.1
|
AUTHENTIK_TAG=2026.8.3
|
||||||
AUTHENTIK_RESTART=unless-stopped
|
AUTHENTIK_RESTART=unless-stopped
|
||||||
AUTHENTIK_PORT_HTTP=9000
|
AUTHENTIK_PORT_HTTP=9000
|
||||||
AUTHENTIK_PORT_HTTPS=9443
|
AUTHENTIK_PORT_HTTPS=9443
|
||||||
AUTHENTIK_POSTGRES_IMAGE=postgres:16-alpine
|
AUTHENTIK_POSTGRES_IMAGE=postgres:16-alpine
|
||||||
|
AUTHENTIK_REDIS_IMAGE=redis:alpine
|
||||||
|
|
||||||
# Database
|
# Database
|
||||||
PG_DB=authentik
|
PG_DB=authentik
|
||||||
Reference in New Issue
Block a user