#!/bin/sh
exec 2>&1
export HOME=/home/authentik

exec chpst -u authentik:authentik -C $HOME \
  podman run -it --rm --sig-proxy \
    --name=authentik-{{ item }} \
    --env-file=/etc/authentik.env \
{% if item == "server" %}
    -p 9000:9000 \
{% endif %}
{% if mailhost_is_local is defined and mailhost_is_local %}
    --add-host={{ mail_host }}:host-gateway \
{% endif %}
    --network=authentik \
    -v ./data:/data \
    -v ./certs:/certs \
    -v ./custom-templates:/templates \
    --mount type=bind,src=/tmp/.s.PGSQL.5432,target=/tmp/.s.PGSQL.5432 \
    ghcr.io/goauthentik/server:{{ authentik_tag }} {{ item }}