docker-compose-service.yaml

services:
  authentik:
    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2022.10.1}
    restart: unless-stopped
    command: server
    environment:
      AUTHENTIK_REDIS__HOST: redis
      AUTHENTIK_POSTGRESQL__HOST: postgresql
      AUTHENTIK_POSTGRESQL__USER: ${PG_USER:-authentik}
      AUTHENTIK_POSTGRESQL__NAME: ${PG_DB:-authentik}
      AUTHENTIK_POSTGRESQL__PASSWORD: ${PG_PASS}
      AUTHENTIK_SECRET_KEY: ${AUTHENTIK_SECRET_KEY}
      AUTHENTIK_ERROR_REPORTING__ENABLED: "true"
    volumes:
      - ./media:/media
      - ./custom-templates:/templates
      - ./geoip:/geoip
    labels:
        traefik.enable: "true"
        traefik.http.routers.authentik.tls: "true"
        traefik.http.routers.authentik.tls.certresolver: "letsencrypt"
        traefik.http.services.authentik.loadbalancer.server.scheme: "http"
        traefik.http.services.authentik.loadbalancer.server.port: "9000"