services:
  authentik_proxy:
    container_name: authentik-proxy-outpost
    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:latest
    restart: unless-stopped
    # Optionally specify the container's network, which must be able to reach the core authentik server.
    # networks:
    #   - foo
    ports:
      - 9000:9000
      - 9443:9443
    environment:
      AUTHENTIK_HOST: https://example.com
      AUTHENTIK_INSECURE: "false"
      AUTHENTIK_TOKEN: 
      # Optional setting to be used when `authentik_host` for internal communication doesn't match the public URL.
      # AUTHENTIK_HOST_BROWSER: https://external-domain.tld