Promote authentik_dev to authentik, bump to 2026.8.3, add redis

Renames the stack to drop the _dev suffix now that it's production-ready.
Bumps AUTHENTIK_TAG from 2025.10.1 to 2026.8.3, adds the redis service
required by the authentik server/worker (was missing entirely), and
fixes stale/duplicated lines in the README.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

authentik/README.md

@@ -10,7 +10,7 @@ Identity provider and SSO platform supporting OIDC, SAML, LDAP, and proxy authen
 
 ## Project Details
 
--   **Container Image:** [ghcr.io/goauthentik/server:2025.10.1](https://github.com/goauthentik/server)
+-   **Container Image:** [ghcr.io/goauthentik/server:2026.8.3](https://github.com/goauthentik/server)
 -   **Reverse Proxy Port:** `9000`
 
 ## Getting Started
@@ -23,7 +23,7 @@ Identity provider and SSO platform supporting OIDC, SAML, LDAP, and proxy authen
 
     PG_DB – default: authentik
     PG_USER – default: authentik
-    AUTHENTIK_TAG – default: 2025.10.1
+    AUTHENTIK_TAG – default: 2026.8.3
     PG_PASS – default: (none, must be set)
     AUTHENTIK_PORT_HTTP – default: 9000
     AUTHENTIK_PORT_HTTPS – default: 9443
@@ -31,11 +31,10 @@ Identity provider and SSO platform supporting OIDC, SAML, LDAP, and proxy authen
 ## Volume Notes
 
     /var/lib/postgresql/data – host path /data/authentik/db
+    /data (redis) – host path /data/authentik/redis
     /media – host path /data/authentik/media
     /templates – host path /data/authentik/custom-templates
-    /media – host path /data/authentik/media
     /certs – host path /data/authentik/certs
-    /templates – host path /data/authentik/custom-templates
 
 ## Network Notes
 
@@ -49,11 +48,11 @@ docker run -d \
   -p 9000:9000 \
   -p 9443:9443 \
   -v /data/authentik/db:/var/lib/postgresql/data \
+  -v /data/authentik/redis:/data \
   -v /data/authentik/media:/media \
   -v /data/authentik/custom-templates:/templates \
-  -v /data/authentik/media:/media \
   -v /data/authentik/certs:/certs \
-  ghcr.io/goauthentik/server:2025.10.1
+  ghcr.io/goauthentik/server:2026.8.3
 ```
 
 See compose.yaml for the full set of environment variables.
@@ -65,10 +64,10 @@ Nothing specific to this stack so far.
 ## Dockhand Stack, Deploy from Git
 
 Cookbooks Repository
-stackname: authentik_dev
+stackname: authentik
-Compose file path: authentik_dev/compose.yaml
+Compose file path: authentik/compose.yaml
-Additional env file (optional): authentik_dev/sample.env
+Additional env file (optional): authentik/sample.env
 
-Then "Load" authentik_dev/sample.env into the Environmental variables in dockhand
+Then "Load" authentik/sample.env into the Environmental variables in dockhand
 
 Create the Stack

authentik/compose.yaml

@@ -1,4 +1,12 @@
 services:
+  redis:
+    image: ${AUTHENTIK_REDIS_IMAGE:-redis:alpine}
+    restart: ${AUTHENTIK_RESTART:-unless-stopped}
+    volumes:
+      - ${VOL_PATH:-/data}/authentik/redis:/data
+    networks:
+      - internal
+
   postgresql:
     image: ${AUTHENTIK_POSTGRES_IMAGE:-postgres:16-alpine}
     restart: ${AUTHENTIK_RESTART:-unless-stopped}
@@ -12,7 +20,7 @@ services:
       - internal
 
   server:
-    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2025.10.1}
+    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2026.8.3}
     restart: ${AUTHENTIK_RESTART:-unless-stopped}
     volumes:
       - ${VOL_PATH:-/data}/authentik/media:/media
@@ -22,6 +30,7 @@ services:
       - AUTHENTIK_POSTGRESQL__NAME=${PG_DB:-authentik}
       - AUTHENTIK_POSTGRESQL__PASSWORD=${PG_PASS}
       - AUTHENTIK_POSTGRESQL__USER=${PG_USER:-authentik}
+      - AUTHENTIK_REDIS__HOST=redis
       - AUTHENTIK_SECRET_KEY=${AUTHENTIK_SECRET_KEY:?secret key required}
     ports:
       - "${AUTHENTIK_PORT_HTTP:-9000}:9000"
@@ -31,10 +40,11 @@ services:
       - internal
     depends_on:
       - postgresql
+      - redis
     command: server
 
   worker:
-    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2025.10.1}
+    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2026.8.3}
     restart: ${AUTHENTIK_RESTART:-unless-stopped}
     volumes:
       - ${VOL_PATH:-/data}/authentik/media:/media
@@ -45,11 +55,13 @@ services:
       - AUTHENTIK_POSTGRESQL__NAME=${PG_DB:-authentik}
       - AUTHENTIK_POSTGRESQL__PASSWORD=${PG_PASS}
       - AUTHENTIK_POSTGRESQL__USER=${PG_USER:-authentik}
+      - AUTHENTIK_REDIS__HOST=redis
       - AUTHENTIK_SECRET_KEY=${AUTHENTIK_SECRET_KEY:?secret key required}
     networks:
       - internal
     depends_on:
       - postgresql
+      - redis
     command: worker
 
 networks:

authentik/sample.env

@@ -1,11 +1,12 @@
 # Compose
 VOL_PATH=/data
 AUTHENTIK_IMAGE=ghcr.io/goauthentik/server
-AUTHENTIK_TAG=2025.10.1
+AUTHENTIK_TAG=2026.8.3
 AUTHENTIK_RESTART=unless-stopped
 AUTHENTIK_PORT_HTTP=9000
 AUTHENTIK_PORT_HTTPS=9443
 AUTHENTIK_POSTGRES_IMAGE=postgres:16-alpine
+AUTHENTIK_REDIS_IMAGE=redis:alpine
 
 # Database
 PG_DB=authentik