From ba1bd42a79bf6c21fce037a9e6b2f2786d6bedde Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luk=C3=A1=C5=A1=20Kucharczyk?= <lukas@kucharczyk.xyz>
Date: Fri, 14 Nov 2025 16:30:01 +0100
Subject: [PATCH] authentik: add

---
 docker-compose.yml | 49 ++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 49 insertions(+)

diff --git a/docker-compose.yml b/docker-compose.yml
index 33aedca..3248f04 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -731,6 +731,55 @@ services:
       public:
         ipv4_address: 192.168.240.60
 
+  authentik-server:
+    command: server
+    depends_on:
+      postgres:
+        condition: service_healthy
+    environment:
+      AUTHENTIK_POSTGRESQL__HOST: postgres
+      AUTHENTIK_POSTGRESQL__NAME: authentik
+      AUTHENTIK_POSTGRESQL__PASSWORD: ${POSTGRES_PASSWORD}
+      AUTHENTIK_POSTGRESQL__USER: ${POSTGRES_USER}
+      AUTHENTIK_SECRET_KEY: WH6M+8rmyMw4BPszIf9bKGInZVcm6Lmce83C9hdG8t4ZeIKi
+    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2025.10.0}
+    ports:
+      - 9002:9000
+      - 9443:9443
+    networks:
+      public:
+        ipv4_address: 192.168.240.61
+    restart: unless-stopped
+    volumes:
+    - ${DOCKER_STORAGE_PATH}/authentik/media:/media
+    - ${DOCKER_STORAGE_PATH}/authentik/custom-templates:/templates
+    labels:
+      caddy: authentik.${DOMAIN}
+      caddy.reverse_proxy: "{{ upstreams 9000 }}"
+
+  authentik-worker:
+    command: worker
+    depends_on:
+      postgres:
+        condition: service_healthy
+    networks:
+      public:
+        ipv4_address: 192.168.240.62
+    environment:
+      AUTHENTIK_POSTGRESQL__HOST: postgres
+      AUTHENTIK_POSTGRESQL__NAME: authentik
+      AUTHENTIK_POSTGRESQL__PASSWORD: ${POSTGRES_PASSWORD}
+      AUTHENTIK_POSTGRESQL__USER: lukas
+      AUTHENTIK_SECRET_KEY: WH6M+8rmyMw4BPszIf9bKGInZVcm6Lmce83C9hdG8t4ZeIKi
+    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2025.10.0}
+    restart: unless-stopped
+    user: root
+    volumes:
+    - /var/run/docker.sock:/var/run/docker.sock
+    - ${DOCKER_STORAGE_PATH}/authentik/media:/media
+    - ${DOCKER_STORAGE_PATH}/authentik/certs:/certs
+    - ${DOCKER_STORAGE_PATH}/authentik/custom-templates:/templates
+
        
 
 networks: