Dockerfile

FROM ghcr.io/goauthentik/server:2022.9.0
USER root
RUN sed -i -e 's# > /dev/stderr##g' /lifecycle/ak
USER authentik
ENTRYPOINT ["/lifecycle/ak"]
CMD ["server"]

fly.toml

app = "ur-app-name"
kill_signal = "SIGINT"
kill_timeout = 5

[processes]
  server = "server"
  worker = "worker"

[env]
  AUTHENTIK_LOG_LEVEL = "info"
  AUTHENTIK_DISABLE_UPDATE_CHECK = "true"
  AUTHENTIK_ERROR_REPORTING__ENABLED = "false"
  AUTHENTIK_DISABLE_STARTUP_ANALYTICS = "true"
  AUTHENTIK_POSTGRESQL__HOST = "..."
  AUTHENTIK_POSTGRESQL__NAME = "authentik"
  AUTHENTIK_POSTGRESQL__USER = "postgres"
  AUTHENTIK_POSTGRESQL__PORT = "5432"
  AUTHENTIK_REDIS__HOST = "..."
  AUTHENTIK_REDIS__CACHE_DB = "0"
  AUTHENTIK_REDIS__MESSAGE_QUEUE_DB = "0"
  AUTHENTIK_REDIS__WS_DB = "0"

[experimental]
  allowed_public_ports = []
  auto_rollback = true

[[services]]
  internal_port = 9000
  processes = ["server"]
  protocol = "tcp"
  
  # Basic concurrency limiting.
  [services.concurrency]
    hard_limit = 25
    soft_limit = 20
    type = "connections"

  # Listen on HTTP but always force to HTTPS.
  [[services.ports]]
    force_https = true
    handlers = ["http"]
    port = 80

  # Basic HTTPS listener.
  [[services.ports]]
    handlers = ["tls", "http"]
    port = 443

  [[services.http_checks]]
    protocol = "http"
    method = "get"
    path = "/-/health/live/"
    grace_period = "5s"
    interval = "5s"
    restart_limit = 0
    timeout = "2s"