version: "3.13"
services:
  postgresql:
    environment:
      AUTHENTIK_SECRET_KEY: g8JIvopgkcpIeRUKgfT5KwHFUwGNBFobwhHMHx08wPTJTtAlmqllAwmr6u4jk+ng8O1gbV/gwZnYylMn
      GRAYLOG_PASSWORD_SECRET: '"TZ3XajhzIBugTl61oNNgrWL0OHTn4qYcNAuzTTHWRKYxxWf61oAEpHOpesLoP7ssgqBTuainTBX6YIVAcYs2de2jhPHQBYD5"'
      GRAYLOG_ROOT_PASSWORD_SHA2: '"1b12de7f4069972e784d42dbe826c0769f1287412cd35479de127fcf816699dc"'
      PG_PASS: KzxbC4hiuEFAuACIijO8EGWa8YvO901BXmh39wBhS5pQv3XV
      POSTGRES_DB: authentik
      POSTGRES_PASSWORD: F@lcon13
      POSTGRES_USER: authentik
    env_file:
    - .env
    healthcheck:
      test:
      - CMD-SHELL
      - pg_isready -d ${POSTGRES_DB} -U ${POSTGRES_USER}
      timeout: 5s
      interval: 30s
      retries: 5
      start_period: 20s
    image: docker.io/library/postgres:16-alpine
    restart: unless-stopped
    volumes:
    - type: volume
      source: database
      target: /var/lib/postgresql/data
  redis:
    command:
    - --save
    - "60"
    - "1"
    - --loglevel
    - warning
    healthcheck:
      test:
      - CMD-SHELL
      - redis-cli ping | grep PONG
      timeout: 3s
      interval: 30s
      retries: 5
      start_period: 20s
    image: docker.io/library/redis:alpine
    restart: unless-stopped
    volumes:
    - type: volume
      source: redis
      target: /data
  server:
    command:
    - server
    depends_on:
    - postgresql
    - redis
    environment:
      AUTHENTIK_POSTGRESQL__HOST: postgresql
      AUTHENTIK_POSTGRESQL__NAME: authentik
      AUTHENTIK_POSTGRESQL__PASSWORD: F@lcon13
      AUTHENTIK_POSTGRESQL__USER: authentik
      AUTHENTIK_REDIS__HOST: redis
      AUTHENTIK_SECRET_KEY: g8JIvopgkcpIeRUKgfT5KwHFUwGNBFobwhHMHx08wPTJTtAlmqllAwmr6u4jk+ng8O1gbV/gwZnYylMn
      GRAYLOG_PASSWORD_SECRET: '"TZ3XajhzIBugTl61oNNgrWL0OHTn4qYcNAuzTTHWRKYxxWf61oAEpHOpesLoP7ssgqBTuainTBX6YIVAcYs2de2jhPHQBYD5"'
      GRAYLOG_ROOT_PASSWORD_SHA2: '"1b12de7f4069972e784d42dbe826c0769f1287412cd35479de127fcf816699dc"'
      PG_PASS: KzxbC4hiuEFAuACIijO8EGWa8YvO901BXmh39wBhS5pQv3XV
    env_file:
    - .env
    image: ghcr.io/goauthentik/server:2024.8.3
    ports:
    - mode: ingress
      target: 9000
      published: 9000
      protocol: tcp
    - mode: ingress
      target: 9443
      published: 9443
      protocol: tcp
    restart: unless-stopped
    volumes:
    - type: bind
      source: /home/traveler/git/dockerserver2/media
      target: /media
    - type: bind
      source: /home/traveler/git/dockerserver2/custom-templates
      target: /templates
  worker:
    command:
    - worker
    depends_on:
    - postgresql
    - redis
    environment:
      AUTHENTIK_POSTGRESQL__HOST: postgresql
      AUTHENTIK_POSTGRESQL__NAME: authentik
      AUTHENTIK_POSTGRESQL__PASSWORD: F@lcon13
      AUTHENTIK_POSTGRESQL__USER: authentik
      AUTHENTIK_REDIS__HOST: redis
      AUTHENTIK_SECRET_KEY: g8JIvopgkcpIeRUKgfT5KwHFUwGNBFobwhHMHx08wPTJTtAlmqllAwmr6u4jk+ng8O1gbV/gwZnYylMn
      GRAYLOG_PASSWORD_SECRET: '"TZ3XajhzIBugTl61oNNgrWL0OHTn4qYcNAuzTTHWRKYxxWf61oAEpHOpesLoP7ssgqBTuainTBX6YIVAcYs2de2jhPHQBYD5"'
      GRAYLOG_ROOT_PASSWORD_SHA2: '"1b12de7f4069972e784d42dbe826c0769f1287412cd35479de127fcf816699dc"'
      PG_PASS: KzxbC4hiuEFAuACIijO8EGWa8YvO901BXmh39wBhS5pQv3XV
    env_file:
    - .env
    image: ghcr.io/goauthentik/server:2024.8.3
    restart: unless-stopped
    user: root
    volumes:
    - type: bind
      source: /var/run/docker.sock
      target: /var/run/docker.sock
    - type: bind
      source: /home/traveler/git/dockerserver2/media
      target: /media
    - type: bind
      source: /home/traveler/git/dockerserver2/certs
      target: /certs
    - type: bind
      source: /home/traveler/git/dockerserver2/custom-templates
      target: /templates
volumes:
  database:
    driver: local
  redis:
    driver: local