|
1 | 1 | version: "3.9" |
2 | 2 |
|
3 | 3 | services: |
| 4 | + postgres: |
| 5 | + image: postgres:15-alpine |
| 6 | + restart: unless-stopped |
| 7 | + environment: |
| 8 | + POSTGRES_USER: ${AUTHENTIK_POSTGRESQL__USER:-authentik} |
| 9 | + POSTGRES_PASSWORD: ${AUTHENTIK_POSTGRESQL__PASSWORD:-authentik} |
| 10 | + POSTGRES_DB: ${AUTHENTIK_POSTGRESQL__NAME:-authentik} |
| 11 | + volumes: |
| 12 | + - postgres-data:/var/lib/postgresql/data |
| 13 | + healthcheck: |
| 14 | + test: ["CMD-SHELL", "pg_isready -U ${AUTHENTIK_POSTGRESQL__USER:-authentik} -d ${AUTHENTIK_POSTGRESQL__NAME:-authentik}"] |
| 15 | + interval: 5s |
| 16 | + timeout: 5s |
| 17 | + retries: 5 |
| 18 | + |
| 19 | + redis: |
| 20 | + image: redis:7-alpine |
| 21 | + restart: unless-stopped |
| 22 | + command: ["redis-server", "--save", "", "--appendonly", "no"] |
| 23 | + |
4 | 24 | authentik-server: |
5 | 25 | image: ghcr.io/goauthentik/server:2025.10.2 |
6 | 26 | command: server |
7 | | - deploy: |
8 | | - replicas: 1 |
| 27 | + restart: unless-stopped |
9 | 28 | env_file: |
10 | 29 | - .env |
11 | 30 | environment: |
12 | | - AUTHENTIK_POSTGRESQL__HOST: CHANGE_ME |
13 | | - AUTHENTIK_POSTGRESQL__NAME: CHANGE_ME |
14 | | - AUTHENTIK_POSTGRESQL__USER: CHANGE_ME |
15 | | - AUTHENTIK_POSTGRESQL__PASSWORD: CHANGE_ME |
16 | | - AUTHENTIK_SECRET_KEY: CHANGE_ME |
| 31 | + AUTHENTIK_POSTGRESQL__HOST: postgres |
| 32 | + AUTHENTIK_POSTGRESQL__NAME: ${AUTHENTIK_POSTGRESQL__NAME:-authentik} |
| 33 | + AUTHENTIK_POSTGRESQL__USER: ${AUTHENTIK_POSTGRESQL__USER:-authentik} |
| 34 | + AUTHENTIK_POSTGRESQL__PASSWORD: ${AUTHENTIK_POSTGRESQL__PASSWORD:-authentik} |
| 35 | + AUTHENTIK_REDIS__HOST: redis |
| 36 | + AUTHENTIK_SECRET_KEY: ${AUTHENTIK_SECRET_KEY:-secret_key} |
17 | 37 | ports: |
18 | 38 | - "${COMPOSE_PORT_HTTP:-5000}:9000" |
19 | 39 | - "${COMPOSE_PORT_HTTPS:-5443}:9443" |
20 | | - restart: unless-stopped |
21 | 40 | volumes: |
22 | | - - /data/goauthentik/data/media:/media |
23 | | - - /data/goauthentik/data/custom-templates:/templates |
| 41 | + - authentik-media:/media |
| 42 | + - authentik-templates:/templates |
| 43 | + depends_on: |
| 44 | + postgres: |
| 45 | + condition: service_healthy |
| 46 | + redis: |
| 47 | + condition: service_started |
24 | 48 |
|
25 | 49 | authentik-worker: |
26 | 50 | image: ghcr.io/goauthentik/server:2025.10.2 |
27 | 51 | command: worker |
28 | | - deploy: |
29 | | - replicas: 1 |
| 52 | + restart: unless-stopped |
| 53 | + user: root |
30 | 54 | env_file: |
31 | 55 | - .env |
32 | 56 | environment: |
33 | | - AUTHENTIK_POSTGRESQL__HOST: CHANGE_ME |
34 | | - AUTHENTIK_POSTGRESQL__NAME: CHANGE_ME |
35 | | - AUTHENTIK_POSTGRESQL__USER: CHANGE_ME |
36 | | - AUTHENTIK_POSTGRESQL__PASSWORD: CHANGE_ME |
37 | | - AUTHENTIK_SECRET_KEY: CHANGE_ME |
38 | | - restart: unless-stopped |
39 | | - user: root |
| 57 | + AUTHENTIK_POSTGRESQL__HOST: postgres |
| 58 | + AUTHENTIK_POSTGRESQL__NAME: ${AUTHENTIK_POSTGRESQL__NAME:-authentik} |
| 59 | + AUTHENTIK_POSTGRESQL__USER: ${AUTHENTIK_POSTGRESQL__USER:-authentik} |
| 60 | + AUTHENTIK_POSTGRESQL__PASSWORD: ${AUTHENTIK_POSTGRESQL__PASSWORD:-authentik} |
| 61 | + AUTHENTIK_REDIS__HOST: redis |
| 62 | + AUTHENTIK_SECRET_KEY: ${AUTHENTIK_SECRET_KEY:-secret_key} |
40 | 63 | volumes: |
41 | | - - /var/run/docker.sock:/var/run/docker.sock |
42 | | - - /data/goauthentik/data/media:/media |
43 | | - - /data/goauthentik/data/certs:/certs |
44 | | - - /data/goauthentik/data/custom-templates:/templates |
| 64 | + - authentik-media:/media |
| 65 | + - authentik-templates:/templates |
| 66 | + - authentik-certs:/certs |
| 67 | + depends_on: |
| 68 | + postgres: |
| 69 | + condition: service_healthy |
| 70 | + redis: |
| 71 | + condition: service_started |
| 72 | + |
| 73 | +volumes: |
| 74 | + postgres-data: |
| 75 | + authentik-media: |
| 76 | + authentik-templates: |
| 77 | + authentik-certs: |
0 commit comments