init

Authentik/docker-compose.yml

@@ -0,0 +1,185 @@
+services:
+    postgresql:
+        container_name: authentik_postgresql
+        env_file:
+            - .env
+        image: postgres:12-alpine
+        healthcheck:
+            test:
+                [
+                    "CMD-SHELL",
+                    "pg_isready -d $${POSTGRES_DB} -U $${POSTGRES_USER}"
+                ]
+            start_period: 20s
+            interval: 30s
+            retries: 5
+            timeout: 5s
+        logging:
+            driver: json-file
+            options:
+                max-size: 50m
+                max-file: "3"
+        networks:
+            authentik:
+                ipv4_address: 172.14.0.3
+        restart: unless-stopped
+        volumes:
+            - postgressql:/var/lib/postgresql/data
+
+    redis:
+        command: --save 60 1 --loglevel warning
+        container_name: authentik_redis
+        healthcheck:
+            test: [ "CMD-SHELL", "redis-cli ping | grep PONG" ]
+            start_period: 20s
+            interval: 30s
+            retries: 5
+            timeout: 3s
+        image: redis:alpine
+        logging:
+            driver: json-file
+            options:
+                max-size: 50m
+                max-file: "3"
+        networks:
+            authentik:
+                ipv4_address: 172.14.0.2
+        restart: unless-stopped
+        volumes:
+            - redis:/data
+
+    authentik:
+        command: server
+        container_name: authentik_server
+        depends_on:
+            - postgresql
+            - redis
+        env_file:
+            - .env
+        image: ghcr.io/goauthentik/server:2022.12.2
+        labels:
+            traefik.docker.network: traefik
+            traefik.enable: true
+            traefik.http.routers.authentik.entrypoints: websecure
+            traefik.http.routers.authentik.rule: Host(`authentik-old.alexlebens.net`)
+            traefik.http.routers.authentik.service: authentik
+            traefik.http.services.authentik.loadbalancer.server.port: 9000
+            traefik.http.routers.authentikoutpost.rule: HostRegexp(`{subdomain:[a-z0-9-]+}.alexlebens.net`) && PathPrefix(`/outpost.goauthentik.io/`)
+            traefik.http.routers.authentikoutpost.entrypoints: websecure
+        logging:
+            driver: json-file
+            options:
+                max-size: 50m
+                max-file: "3"
+        networks:
+            traefik: null
+            authentik:
+                ipv4_address: 172.14.0.10
+        restart: unless-stopped
+        privileged: true
+        volumes:
+            - media:/media
+            - templates:/templates
+
+    authentik_worker:
+        command: worker
+        container_name: authentik_worker
+        depends_on:
+            - authentik
+        env_file:
+            - .env
+        image: ghcr.io/goauthentik/server:2022.12.2
+        logging:
+            driver: json-file
+            options:
+                max-size: 50m
+                max-file: "3"
+        networks:
+            authentik:
+                ipv4_address: 172.14.0.11
+        privileged: true
+        restart: unless-stopped
+        user: root
+        volumes:
+            - backups:/backups
+            - certs:/certs
+            - media:/media
+            - templates:/templates
+            - /var/run/docker.sock:/var/run/docker.sock
+
+    authentik_ldap:
+        container_name: authentik_ldap
+        depends_on:
+            - authentik
+        env_file:
+            - .env
+        image: ghcr.io/goauthentik/ldap:2022.12.2
+        logging:
+            driver: json-file
+            options:
+                max-size: 50m
+                max-file: "3"
+        networks:
+            authentik:
+                ipv4_address: 172.14.0.12
+            traefik: null
+        ports:
+            - 192.168.1.15:389:389/tcp
+            - 192.168.1.15:636:636/tcp
+        privileged: true
+        restart: unless-stopped
+
+networks:
+    traefik:
+        name: traefik
+        external: true
+
+    authentik:
+        name: authentik
+        external: false
+        ipam:
+            config:
+                - subnet: 172.14.0.0/16
+
+volumes:
+    postgressql:
+        driver: local
+        driver_opts:
+            type: none
+            o: bind
+            device: /var/lib/docker/volumes/partition/authentik_postgressql
+
+    redis:
+        driver: local
+        driver_opts:
+            type: none
+            o: bind
+            device: /var/lib/docker/volumes/partition/authentik_redis
+
+    backups:
+        driver: local
+        driver_opts:
+            type: none
+            o: bind
+            device: /var/lib/docker/volumes/partition/authentik_backups
+
+    certs:
+        driver: local
+        driver_opts:
+            type: none
+            o: bind
+            device: /var/lib/docker/volumes/partition/authentik_certs
+
+    media:
+        driver: local
+        driver_opts:
+            type: none
+            o: bind
+            device: /var/lib/docker/volumes/partition/authentik_media
+
+    templates:
+        driver: local
+        driver_opts:
+            type: none
+            o: bind
+            device: /var/lib/docker/volumes/partition/authentik_templates