Add authentik role

2026-10-04 19:34:22 +02:00
parent 1350a98aac
commit e4613ccb53
11 changed files with 206 additions and 0 deletions
@@ -0,0 +1,20 @@
+#!/bin/sh
+exec 2>&1
+export HOME=/home/authentik
+
+exec chpst -u authentik:authentik -C $HOME \
+  podman run -it --rm --sig-proxy \
+    --name=authentik-{{ item }} \
+    --env-file=/etc/authentik.env \
+{% if item == "server" %}
+    -p 9000:9000 \
+{% endif %}
+{% if mailhost_is_local is defined and mailhost_is_local %}
+    --add-host={{ mail_host }}:host-gateway \
+{% endif %}
+    --network=authentik \
+    -v ./data:/data \
+    -v ./certs:/certs \
+    -v ./custom-templates:/templates \
+    --mount type=bind,src=/tmp/.s.PGSQL.5432,target=/tmp/.s.PGSQL.5432 \
+    ghcr.io/goauthentik/server:{{ authentik_tag }} {{ item }}
@@ -0,0 +1,19 @@
+AUTHENTIK_POSTGRESQL__HOST=/tmp
+AUTHENTIK_POSTGRESQL__NAME={{ authentik_db_name }}
+AUTHENTIK_POSTGRESQL__PASSWORD={{ authentik_db_pass }}
+AUTHENTIK_POSTGRESQL__USER={{ authentik_db_user }}
+AUTHENTIK_SECRET_KEY={{ authentik_secret_key }}
+
+# SMTP server
+AUTHENTIK_EMAIL__HOST={{ mail_host }}
+AUTHENTIK_EMAIL__PORT=465
+# Optionally authenticate (don't add quotation marks to your password)
+AUTHENTIK_EMAIL__USERNAME=auth@cosmosim.dev
+AUTHENTIK_EMAIL__PASSWORD={{ authentik_mail_pass }}
+# STARTTLS / explicit TLS, usually on port 587
+AUTHENTIK_EMAIL__USE_TLS=false
+# Implicit TLS/SSL on the SMTP connection (`USE_SSL` is the variable name), usually on port 465
+AUTHENTIK_EMAIL__USE_SSL=true
+AUTHENTIK_EMAIL__TIMEOUT=10
+# Sender email address; verify that the domain is valid.
+AUTHENTIK_EMAIL__FROM=auth@cosmosim.dev
@@ -0,0 +1,2 @@
+#!/bin/sh
+exec vlogger -t {{ item }}