---
kind: compose
metadata:
  name: Authentik
  description: |-
    Integrate Authentik Single Sign-On (SSO) for secure and streamlined user authentication.
    Authentik is an open-source identity provider that supports various authentication protocols.
    This configuration enables OAuth-based SSO, allowing users to log in using their Authentik
    credentials, enhancing security and user experience.
    ## Prerequisites
    - :warning: The `authentik_secret_key` must be generated using the following command
    according to the official documentation.
    ```bash
    echo "$(openssl rand -base64 60 | tr -d '\n')"
    ```
    ## References
    * **Project:** https://goauthentik.io/
    * **Documentation:** https://goauthentik.io/docs/
    * **GitHub:** https://github.com/goauthentik/authentik
  icon:
    provider: selfh
    id: authentik
  version: 2025.10.3
  author: Christian Lempa
  date: '2025-12-16'
  tags:
    - traefik
    - volume
spec:
  general:
    vars:
      service_name:
        default: authentik
  database:
    vars:
      database_name:
        default: authentik
      database_user:
        default: authentik
  ports:
    vars:
      ports_http:
        default: 8000
      ports_https:
        default: 8443
  traefik:
    vars:
      traefik_host:
        default: authentik
  authentik:
    description: Configure Authentik application settings
    required: true
    vars:
      authentik_secret_key:
        description: Secret Key
        extra: Used for cookie signing and unique user IDs
        type: secret
        required: true
      authentik_admin_password:
        description: Initial admin user password
        type: secret
        config:
          autogenerated: true
      authentik_error_reporting:
        description: Enable error reporting to Authentik developers
        type: bool