authentik: add

docker-compose.yml

@@ -731,6 +731,55 @@ services:
       public:
         ipv4_address: 192.168.240.60
 
+  authentik-server:
+    command: server
+    depends_on:
+      postgres:
+        condition: service_healthy
+    environment:
+      AUTHENTIK_POSTGRESQL__HOST: postgres
+      AUTHENTIK_POSTGRESQL__NAME: authentik
+      AUTHENTIK_POSTGRESQL__PASSWORD: ${POSTGRES_PASSWORD}
+      AUTHENTIK_POSTGRESQL__USER: ${POSTGRES_USER}
+      AUTHENTIK_SECRET_KEY: WH6M+8rmyMw4BPszIf9bKGInZVcm6Lmce83C9hdG8t4ZeIKi
+    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2025.10.0}
+    ports:
+      - 9002:9000
+      - 9443:9443
+    networks:
+      public:
+        ipv4_address: 192.168.240.61
+    restart: unless-stopped
+    volumes:
+    - ${DOCKER_STORAGE_PATH}/authentik/media:/media
+    - ${DOCKER_STORAGE_PATH}/authentik/custom-templates:/templates
+    labels:
+      caddy: authentik.${DOMAIN}
+      caddy.reverse_proxy: "{{ upstreams 9000 }}"
+
+  authentik-worker:
+    command: worker
+    depends_on:
+      postgres:
+        condition: service_healthy
+    networks:
+      public:
+        ipv4_address: 192.168.240.62
+    environment:
+      AUTHENTIK_POSTGRESQL__HOST: postgres
+      AUTHENTIK_POSTGRESQL__NAME: authentik
+      AUTHENTIK_POSTGRESQL__PASSWORD: ${POSTGRES_PASSWORD}
+      AUTHENTIK_POSTGRESQL__USER: lukas
+      AUTHENTIK_SECRET_KEY: WH6M+8rmyMw4BPszIf9bKGInZVcm6Lmce83C9hdG8t4ZeIKi
+    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2025.10.0}
+    restart: unless-stopped
+    user: root
+    volumes:
+    - /var/run/docker.sock:/var/run/docker.sock
+    - ${DOCKER_STORAGE_PATH}/authentik/media:/media
+    - ${DOCKER_STORAGE_PATH}/authentik/certs:/certs
+    - ${DOCKER_STORAGE_PATH}/authentik/custom-templates:/templates
+
        
 
 networks: