--- version: "3.4" services: postgresql: image: docker.io/library/postgres:12-alpine restart: unless-stopped healthcheck: test: ["CMD-SHELL", "pg_isready -d $${POSTGRES_DB} -U $${POSTGRES_USER}"] start_period: 20s interval: 30s retries: 5 timeout: 5s volumes: - ./database:/var/lib/postgresql/data environment: POSTGRES_PASSWORD: {{ authentik_dbpass }} POSTGRES_USER: {{ authentik_dbuser }} POSTGRES_DB: {{ authentik_dbname }} redis: image: docker.io/library/redis:alpine command: --save 60 1 --loglevel warning restart: unless-stopped healthcheck: test: ["CMD-SHELL", "redis-cli ping | grep PONG"] start_period: 20s interval: 30s retries: 5 timeout: 3s volumes: - ./redis:/data server: image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2023.10.6} restart: unless-stopped command: server environment: AUTHENTIK_REDIS__HOST: redis AUTHENTIK_POSTGRESQL__HOST: postgresql AUTHENTIK_POSTGRESQL__USER: {{ authentik_dbuser }} AUTHENTIK_POSTGRESQL__NAME: {{ authentik_dbname }} AUTHENTIK_POSTGRESQL__PASSWORD: {{ authentik_dbpass }} AUTHENTIK_SECRET_KEY: {{ authentik_secret }} volumes: - ./media:/media - ./custom-templates:/templates ports: - "127.0.0.1:9000:9000" depends_on: - postgresql - redis worker: image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2023.10.6} restart: unless-stopped command: worker environment: AUTHENTIK_REDIS__HOST: redis AUTHENTIK_POSTGRESQL__HOST: postgresql AUTHENTIK_POSTGRESQL__USER: {{ authentik_dbuser }} AUTHENTIK_POSTGRESQL__NAME: {{ authentik_dbname }} AUTHENTIK_POSTGRESQL__PASSWORD: {{ authentik_dbpass }} AUTHENTIK_SECRET_KEY: {{ authentik_secret }} # `user: root` and the docker socket volume are optional. # See more for the docker socket integration here: # https://goauthentik.io/docs/outposts/integrations/docker # Removing `user: root` also prevents the worker from fixing the permissions # on the mounted folders, so when removing this make sure the folders have the correct UID/GID # (1000:1000 by default) user: root volumes: - /var/run/docker.sock:/var/run/docker.sock - ./media:/media - ./certs:/certs - ./custom-templates:/templates depends_on: - postgresql - redis