Dateien nach "apps/authentik" hochladen
This commit is contained in:
parent
26e5a2852c
commit
6ea94b5d9d
35
apps/authentik/config.json
Normal file
35
apps/authentik/config.json
Normal file
|
|
@ -0,0 +1,35 @@
|
||||||
|
{
|
||||||
|
"$schema": "../app-info-schema.json",
|
||||||
|
"name": "Authentik",
|
||||||
|
"port": 9000,
|
||||||
|
"available": true,
|
||||||
|
"exposable": true,
|
||||||
|
"dynamic_config": true,
|
||||||
|
"no_gui": true,
|
||||||
|
"id": "authentik",
|
||||||
|
"tipi_version": 44,
|
||||||
|
"version": "2025.4.1",
|
||||||
|
"https": true,
|
||||||
|
"categories": ["development"],
|
||||||
|
"description": "The authentication glue you need.",
|
||||||
|
"short_desc": "The authentication glue you need.",
|
||||||
|
"author": "goauthentik",
|
||||||
|
"source": "https://github.com/goauthentik/authentik",
|
||||||
|
"form_fields": [
|
||||||
|
{
|
||||||
|
"type": "random",
|
||||||
|
"label": "AUTHENTIK_DB_PASSWORD",
|
||||||
|
"min": 40,
|
||||||
|
"env_variable": "AUTHENTIK_DB_PASSWORD"
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"type": "random",
|
||||||
|
"label": "AUTHENTIK_SECRET_KEY",
|
||||||
|
"min": 50,
|
||||||
|
"env_variable": "AUTHENTIK_SECRET_KEY"
|
||||||
|
}
|
||||||
|
],
|
||||||
|
"supported_architectures": ["arm64", "amd64"],
|
||||||
|
"created_at": 1691943801422,
|
||||||
|
"updated_at": 1748547279201
|
||||||
|
}
|
||||||
110
apps/authentik/docker-compose.json
Normal file
110
apps/authentik/docker-compose.json
Normal file
|
|
@ -0,0 +1,110 @@
|
||||||
|
{
|
||||||
|
"$schema": "../dynamic-compose-schema.json",
|
||||||
|
"services": [
|
||||||
|
{
|
||||||
|
"image": "ghcr.io/goauthentik/server:2025.4.1",
|
||||||
|
"name": "authentik",
|
||||||
|
"internalPort": 9000,
|
||||||
|
"isMain": true,
|
||||||
|
"command": "server",
|
||||||
|
"volumes": [
|
||||||
|
{
|
||||||
|
"hostPath": "${APP_DATA_DIR}/data/authentik-media",
|
||||||
|
"containerPath": "/media"
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"hostPath": "${APP_DATA_DIR}/data/authentik-custom-templates",
|
||||||
|
"containerPath": "/templates"
|
||||||
|
}
|
||||||
|
],
|
||||||
|
"addPorts": [
|
||||||
|
{
|
||||||
|
"hostPort": 9443,
|
||||||
|
"containerPort": 9443
|
||||||
|
}
|
||||||
|
],
|
||||||
|
"environment": {
|
||||||
|
"AUTHENTIK_REDIS__HOST": "authentik-redis",
|
||||||
|
"AUTHENTIK_POSTGRESQL__HOST": "authentik-db",
|
||||||
|
"AUTHENTIK_POSTGRESQL__USER": "authentik",
|
||||||
|
"AUTHENTIK_POSTGRESQL__NAME": "authentik",
|
||||||
|
"AUTHENTIK_POSTGRESQL__PASSWORD": "${AUTHENTIK_DB_PASSWORD}",
|
||||||
|
"AUTHENTIK_SECRET_KEY": "${AUTHENTIK_SECRET_KEY}"
|
||||||
|
},
|
||||||
|
"dependsOn": ["authentik-db", "authentik-redis"]
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"image": "ghcr.io/goauthentik/server:2025.4.1",
|
||||||
|
"name": "authentik-worker",
|
||||||
|
"command": "worker",
|
||||||
|
"user": "root",
|
||||||
|
"volumes": [
|
||||||
|
{
|
||||||
|
"hostPath": "/var/run/docker.sock",
|
||||||
|
"containerPath": "/var/run/docker.sock"
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"hostPath": "${APP_DATA_DIR}/data/authentik-media",
|
||||||
|
"containerPath": "/media"
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"hostPath": "${APP_DATA_DIR}/data/authentik-certs",
|
||||||
|
"containerPath": "/certs"
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"hostPath": "${APP_DATA_DIR}/data/authentik-custom-templates",
|
||||||
|
"containerPath": "/templates"
|
||||||
|
}
|
||||||
|
],
|
||||||
|
"environment": {
|
||||||
|
"AUTHENTIK_REDIS__HOST": "authentik-redis",
|
||||||
|
"AUTHENTIK_POSTGRESQL__HOST": "authentik-db",
|
||||||
|
"AUTHENTIK_POSTGRESQL__USER": "authentik",
|
||||||
|
"AUTHENTIK_POSTGRESQL__NAME": "authentik",
|
||||||
|
"AUTHENTIK_POSTGRESQL__PASSWORD": "${AUTHENTIK_DB_PASSWORD}",
|
||||||
|
"AUTHENTIK_SECRET_KEY": "${AUTHENTIK_SECRET_KEY}"
|
||||||
|
},
|
||||||
|
"dependsOn": ["authentik-db", "authentik-redis"]
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"image": "postgres:12-alpine",
|
||||||
|
"name": "authentik-db",
|
||||||
|
"volumes": [
|
||||||
|
{
|
||||||
|
"hostPath": "${APP_DATA_DIR}/data/postgres",
|
||||||
|
"containerPath": "/var/lib/postgresql/data"
|
||||||
|
}
|
||||||
|
],
|
||||||
|
"environment": {
|
||||||
|
"POSTGRES_PASSWORD": "${AUTHENTIK_DB_PASSWORD}",
|
||||||
|
"POSTGRES_USER": "authentik",
|
||||||
|
"POSTGRES_DB": "authentik"
|
||||||
|
},
|
||||||
|
"healthCheck": {
|
||||||
|
"test": "pg_isready -d $${POSTGRES_DB} -U $${POSTGRES_USER}",
|
||||||
|
"interval": "30s",
|
||||||
|
"timeout": "5s",
|
||||||
|
"retries": 5,
|
||||||
|
"startPeriod": "20s"
|
||||||
|
}
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"image": "redis:alpine",
|
||||||
|
"name": "authentik-redis",
|
||||||
|
"command": "--save 60 1 --loglevel warning",
|
||||||
|
"volumes": [
|
||||||
|
{
|
||||||
|
"hostPath": "${APP_DATA_DIR}/data/redis",
|
||||||
|
"containerPath": "/data"
|
||||||
|
}
|
||||||
|
],
|
||||||
|
"healthCheck": {
|
||||||
|
"test": "redis-cli ping | grep PONG",
|
||||||
|
"interval": "30s",
|
||||||
|
"timeout": "3s",
|
||||||
|
"retries": 5,
|
||||||
|
"startPeriod": "20s"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
]
|
||||||
|
}
|
||||||
111
apps/authentik/docker-compose.yml
Normal file
111
apps/authentik/docker-compose.yml
Normal file
|
|
@ -0,0 +1,111 @@
|
||||||
|
version: '3.7'
|
||||||
|
services:
|
||||||
|
authentik:
|
||||||
|
image: ghcr.io/goauthentik/server:2025.4.1
|
||||||
|
restart: unless-stopped
|
||||||
|
command: server
|
||||||
|
container_name: authentik
|
||||||
|
environment:
|
||||||
|
AUTHENTIK_REDIS__HOST: authentik-redis
|
||||||
|
AUTHENTIK_POSTGRESQL__HOST: authentik-db
|
||||||
|
AUTHENTIK_POSTGRESQL__USER: authentik
|
||||||
|
AUTHENTIK_POSTGRESQL__NAME: authentik
|
||||||
|
AUTHENTIK_POSTGRESQL__PASSWORD: ${AUTHENTIK_DB_PASSWORD}
|
||||||
|
AUTHENTIK_SECRET_KEY: ${AUTHENTIK_SECRET_KEY}
|
||||||
|
volumes:
|
||||||
|
- ${APP_DATA_DIR}/data/authentik-media:/media
|
||||||
|
- ${APP_DATA_DIR}/data/authentik-custom-templates:/templates
|
||||||
|
ports:
|
||||||
|
- ${APP_PORT}:9443
|
||||||
|
depends_on:
|
||||||
|
- authentik-db
|
||||||
|
- authentik-redis
|
||||||
|
networks:
|
||||||
|
- tipi_main_network
|
||||||
|
labels:
|
||||||
|
traefik.enable: true
|
||||||
|
traefik.http.middlewares.authentik-web-redirect.redirectscheme.scheme: https
|
||||||
|
traefik.http.services.authentik.loadbalancer.server.port: 9000
|
||||||
|
traefik.http.routers.authentik-insecure.rule: Host(`${APP_DOMAIN}`)
|
||||||
|
traefik.http.routers.authentik-insecure.entrypoints: web
|
||||||
|
traefik.http.routers.authentik-insecure.service: authentik
|
||||||
|
traefik.http.routers.authentik-insecure.middlewares: authentik-web-redirect
|
||||||
|
traefik.http.routers.authentik.rule: Host(`${APP_DOMAIN}`)
|
||||||
|
traefik.http.routers.authentik.entrypoints: websecure
|
||||||
|
traefik.http.routers.authentik.service: authentik
|
||||||
|
traefik.http.routers.authentik.tls.certresolver: myresolver
|
||||||
|
traefik.http.routers.authentik-local-insecure.rule: Host(`authentik.${LOCAL_DOMAIN}`)
|
||||||
|
traefik.http.routers.authentik-local-insecure.entrypoints: web
|
||||||
|
traefik.http.routers.authentik-local-insecure.service: authentik
|
||||||
|
traefik.http.routers.authentik-local-insecure.middlewares: authentik-web-redirect
|
||||||
|
traefik.http.routers.authentik-local.rule: Host(`authentik.${LOCAL_DOMAIN}`)
|
||||||
|
traefik.http.routers.authentik-local.entrypoints: websecure
|
||||||
|
traefik.http.routers.authentik-local.service: authentik
|
||||||
|
traefik.http.routers.authentik-local.tls: true
|
||||||
|
runtipi.managed: true
|
||||||
|
authentik-worker:
|
||||||
|
image: ghcr.io/goauthentik/server:2025.4.1
|
||||||
|
restart: unless-stopped
|
||||||
|
command: worker
|
||||||
|
container_name: authentik-worker
|
||||||
|
environment:
|
||||||
|
AUTHENTIK_REDIS__HOST: authentik-redis
|
||||||
|
AUTHENTIK_POSTGRESQL__HOST: authentik-db
|
||||||
|
AUTHENTIK_POSTGRESQL__USER: authentik
|
||||||
|
AUTHENTIK_POSTGRESQL__NAME: authentik
|
||||||
|
AUTHENTIK_POSTGRESQL__PASSWORD: ${AUTHENTIK_DB_PASSWORD}
|
||||||
|
AUTHENTIK_SECRET_KEY: ${AUTHENTIK_SECRET_KEY}
|
||||||
|
user: root
|
||||||
|
volumes:
|
||||||
|
- /var/run/docker.sock:/var/run/docker.sock
|
||||||
|
- ${APP_DATA_DIR}/data/authentik-media:/media
|
||||||
|
- ${APP_DATA_DIR}/data/authentik-certs:/certs
|
||||||
|
- ${APP_DATA_DIR}/data/authentik-custom-templates:/templates
|
||||||
|
depends_on:
|
||||||
|
- authentik-db
|
||||||
|
- authentik-redis
|
||||||
|
networks:
|
||||||
|
- tipi_main_network
|
||||||
|
labels:
|
||||||
|
runtipi.managed: true
|
||||||
|
authentik-db:
|
||||||
|
container_name: authentik-db
|
||||||
|
image: postgres:12-alpine
|
||||||
|
restart: unless-stopped
|
||||||
|
healthcheck:
|
||||||
|
test:
|
||||||
|
- CMD-SHELL
|
||||||
|
- pg_isready -d $${POSTGRES_DB} -U $${POSTGRES_USER}
|
||||||
|
start_period: 20s
|
||||||
|
interval: 30s
|
||||||
|
retries: 5
|
||||||
|
timeout: 5s
|
||||||
|
volumes:
|
||||||
|
- ${APP_DATA_DIR}/data/postgres:/var/lib/postgresql/data
|
||||||
|
environment:
|
||||||
|
POSTGRES_PASSWORD: ${AUTHENTIK_DB_PASSWORD}
|
||||||
|
POSTGRES_USER: authentik
|
||||||
|
POSTGRES_DB: authentik
|
||||||
|
networks:
|
||||||
|
- tipi_main_network
|
||||||
|
labels:
|
||||||
|
runtipi.managed: true
|
||||||
|
authentik-redis:
|
||||||
|
image: redis:alpine
|
||||||
|
command: '--save 60 1 --loglevel warning'
|
||||||
|
container_name: authentik-redis
|
||||||
|
restart: unless-stopped
|
||||||
|
healthcheck:
|
||||||
|
test:
|
||||||
|
- CMD-SHELL
|
||||||
|
- redis-cli ping | grep PONG
|
||||||
|
start_period: 20s
|
||||||
|
interval: 30s
|
||||||
|
retries: 5
|
||||||
|
timeout: 3s
|
||||||
|
volumes:
|
||||||
|
- ${APP_DATA_DIR}/data/redis:/data
|
||||||
|
networks:
|
||||||
|
- tipi_main_network
|
||||||
|
labels:
|
||||||
|
runtipi.managed: true
|
||||||
Loading…
Reference in New Issue
Block a user