Update quadlets

authentik/quadlets/.env

@@ -0,0 +1,27 @@
+#database shi
+POSTGRES_DB=authentik
+POSTGRES_USER=authentik
+POSTGRES_PASSWORD={YOUR DB PASSWORD}
+
+# authentik stuff
+AUTHENTIK_SECRET_KEY={YOUR SECRET KEY}
+AUTHENTIK_ERROR_REPORTING__ENABLED=false
+
+AUTHENTIK_POSTGRESQL__HOST=authentik-postgres
+AUTHENTIK_POSTGRESQL__NAME=authentik
+AUTHENTIK_POSTGRESQL__PASSWORD={YOUR DB PASSWORD}
+AUTHENTIK_POSTGRESQL__USER=authentik
+
+# SMTP Host Emails are sent to
+AUTHENTIK_EMAIL__HOST=
+AUTHENTIK_EMAIL__PORT=
+# Optionally authenticate (don't add quotation marks to your password)
+AUTHENTIK_EMAIL__USERNAME=
+AUTHENTIK_EMAIL__PASSWORD=
+# Use StartTLS
+AUTHENTIK_EMAIL__USE_TLS=false
+# Use SSL
+AUTHENTIK_EMAIL__USE_SSL=false
+AUTHENTIK_EMAIL__TIMEOUT=10
+# Email address authentik will send from, should have a correct @domain
+AUTHENTIK_EMAIL__FROM=

authentik/quadlets/authentik-postgres.container

@@ -0,0 +1,29 @@
+[Unit]
+Description=postgres for authentik
+
+After=authentik-database.volume
+Requires=authentik-database.volume
+
+PartOf=authentik.target
+
+[Container]
+Image=docker.io/library/postgres:16-alpine
+ContainerName=authentik-postgres
+
+Volume=auth_database:/var/lib/postgresql/data
+
+Network=authentik.network
+
+EnvironmentFile=%h/services/authentik/.env
+
+HealthCmd=pg_isready -d $${POSTGRES_DB} -U $${POSTGRES_USER}
+HealthInterval=30s
+HealthRetries=5
+HealthStartPeriod=20s
+HealthTimeout=5s
+
+[Service]
+Restart=always
+
+[Install]
+WantedBy=authentik.target

authentik/quadlets/authentik-server.container

@@ -0,0 +1,30 @@
+[Unit]
+Description=server for authentik
+
+After=authentik-postgres.service
+Requires=authentik-postgres.service
+
+PartOf=authentik.target
+
+[Container]
+Image=ghcr.io/goauthentik/server:2026.2.2
+
+ContainerName=authentik-server
+Exec=server
+
+EnvironmentFile=%h/services/authentik/.env
+
+PublishPort=127.0.0.1:9000:9000
+PublishPort=127.0.0.1:9443:9443
+
+Network=authentik.network
+
+Volume=%h/services/authentik/data:/data
+Volume=%h/services/authentik/custom-templates:/templates
+ShmSize=512m
+
+[Service]
+Restart=always
+
+[Install]
+WantedBy=authentik.target

authentik/quadlets/authentik-worker.container

@@ -0,0 +1,31 @@
+[Unit]
+Description=authentik worker
+
+After=authentik-postgres.service
+Requires=authentik-postgres.service
+
+PartOf=authentik.target
+
+[Container]
+Image=ghcr.io/goauthentik/server:2026.2.2
+
+ContainerName=authentik-worker
+Exec=worker
+
+EnvironmentFile=%h/services/authentik/.env
+
+User=root
+Network=authentik.network
+
+Volume=/var/run/docker.sock:/var/run/docker.sock
+Volume=%h/services/authentik/data:/data
+Volume=%h/services/authentik/certs:/certs
+Volume=%h/services/authentik/custom-templates:/templates
+
+ShmSize=512m
+
+[Service]
+Restart=always
+
+[Install]
+WantedBy=authentik.target

authentik/quadlets/authentik.network

@@ -0,0 +1,7 @@
+[Unit]
+Description=authentik Podman Network
+
+PartOf=authentik.target
+
+[Network]
+NetworkName=authentik

authentik/quadlets/authentik.target

@@ -0,0 +1,9 @@
+[Unit]
+Description=authentik container stack
+
+Wants=authentik-postgres.service
+Wants=authentik-worker.service
+Wants=authentik-server.service
+
+[Install]
+WantedBy=default.target