services:
  postgresql:
    image: docker.io/library/postgres:16
    restart: unless-stopped
    environment:
      POSTGRES_PASSWORD: authentik
      POSTGRES_USER: authentik
      POSTGRES_DB: authentik
    volumes:
      - database:/var/lib/postgresql/data

  server:
    image: ghcr.io/goauthentik/server:2026.8
    restart: unless-stopped
    command: server
    environment:
      AUTHENTIK_REDIS__HOST: redis
      AUTHENTIK_REDIS__PASSWORD: PerCent7heStorySp0tInOrd3r
      AUTHENTIK_REDIS__DB: 0
      AUTHENTIK_POSTGRESQL__HOST: postgresql
      AUTHENTIK_POSTGRESQL__USER: authentik
      AUTHENTIK_POSTGRESQL__NAME: authentik
      AUTHENTIK_POSTGRESQL__PASSWORD: authentik
      AUTHENTIK_SECRET_KEY: "/jpOrfgtWEoLukXgpqC0JQWgmKUqyu5dG+oUwawVsLs83Wl5dC+nALtsosyrnBAIyWefKKQMcET2yy1RwhZO5w=="
      AUTHENTIK_EMAIL__HOST: smtp.web.de
      AUTHENTIK_EMAIL__PORT: 587
      AUTHENTIK_EMAIL__USERNAME: "ll_m@web.de"
      AUTHENTIK_EMAIL__PASSWORD: "Mira2012"
      AUTHENTIK_EMAIL__USE_TLS: true
      AUTHENTIK_EMAIL__USE_SSL: false
      AUTHENTIK_EMAIL__TIMEOUT: 30
      AUTHENTIK_EMAIL__FROM: "ll_m@web.de"
    ports:
      - "9000:9000"
      - "9443:9443"
    depends_on:
      - postgresql
    volumes:
      - media:/media
      - custom-templates:/templates
    networks:
      - shared-proxy-services
      - default

  worker:
    image: ghcr.io/goauthentik/server:2026.8
    restart: unless-stopped
    command: worker
    environment:
      AUTHENTIK_REDIS__HOST: redis
      AUTHENTIK_REDIS__PASSWORD: PerCent7heStorySp0tInOrd3r
      AUTHENTIK_REDIS__DB: 0
      AUTHENTIK_POSTGRESQL__HOST: postgresql
      AUTHENTIK_POSTGRESQL__USER: authentik
      AUTHENTIK_POSTGRESQL__NAME: authentik
      AUTHENTIK_POSTGRESQL__PASSWORD: authentik
      AUTHENTIK_SECRET_KEY: "/jpOrfgtWEoLukXgpqC0JQWgmKUqyu5dG+oUwawVsLs83Wl5dC+nALtsosyrnBAIyWefKKQMcET2yy1RwhZO5w=="
      AUTHENTIK_EMAIL__HOST: smtp.web.de
      AUTHENTIK_EMAIL__PORT: 587
      AUTHENTIK_EMAIL__USERNAME: "ll_m@web.de"
      AUTHENTIK_EMAIL__PASSWORD: "Mira2012"
      AUTHENTIK_EMAIL__USE_TLS: true
      AUTHENTIK_EMAIL__USE_SSL: false
      AUTHENTIK_EMAIL__TIMEOUT: 30
      AUTHENTIK_EMAIL__FROM: "ll_m@web.de"
    depends_on:
      - postgresql
    volumes:
      - media:/media
      - certificates:/certificates
      - custom-templates:/templates
    networks:
      - shared-proxy-services
      - default

volumes:
  database:
  redis:
  media:
  certificates:
  custom-templates:

networks:
  default:
    external: true
    name: shared-redis-services
  shared-proxy-services:
    external: true