---
authentik_dir: /srv/docker/authentik
authentik_image: ghcr.io/goauthentik/server:2025.6
authentik_postgres_image: docker.io/library/postgres:16-alpine
authentik_redis_image: docker.io/library/redis:7-alpine
authentik_http_port: 9000
authentik_https_port: 9443
authentik_domain: auth.example.invalid
authentik_routing_mode: "{{ nbops_service_routing_mode }}"
authentik_traefik_network: "{{ nbops_proxy_network }}"
authentik_traefik_entrypoint: "{{ nbops_traefik_entrypoint }}"
authentik_traefik_tls: "{{ nbops_traefik_tls }}"
authentik_secret_key: "{{ vault_authentik_secret_key | default('CHANGE_ME_IN_VAULT') }}"
authentik_postgres_password: "{{ vault_authentik_postgres_password | default('CHANGE_ME_IN_VAULT') }}"
authentik_env:
  AUTHENTIK_SECRET_KEY: "{{ authentik_secret_key }}"
  AUTHENTIK_POSTGRESQL__HOST: postgresql
  AUTHENTIK_POSTGRESQL__USER: authentik
  AUTHENTIK_POSTGRESQL__NAME: authentik
  AUTHENTIK_POSTGRESQL__PASSWORD: "{{ authentik_postgres_password }}"
  AUTHENTIK_REDIS__HOST: redis
authentik_tcp_ports:
  - "{{ authentik_http_port }}"
  - "{{ authentik_https_port }}"