services:
  authentik_ldap:
    environment:
      AUTHENTIK_HOST: https://auth.sectorq.eu
      AUTHENTIK_INSECURE: 'false'
      AUTHENTIK_TOKEN: EfLokorVuj1woeO0p1he3mRJvVfGfvdKM8Bdew3DtDZZ3To6bVpFSDI7GOqY
      TZ: Europe/Bratislava
    image: ${DOCKER_REGISTRY:-}ghcr.io/goauthentik/ldap:${AUTHENTIK_TAG:-2024.6.1}
    labels:
      wud.watch: true
      wud.watch.digest: true
    ports:
    - 2389:3389
    - 2636:6636
    restart: ${RESTART:-unless-stopped}
  postgresql:
    environment:
      AUTHENTIK_SECRET_KEY: $AUTHENTIK_SECRET_KEY
      POSTGRES_DB: ${PG_DB:-authentik}
      POSTGRES_PASSWORD: ${PG_PASS:?database password required}
      POSTGRES_USER: ${PG_USER:-authentik}
      TZ: Europe/Bratislava
    healthcheck:
      interval: 30s
      retries: 5
      start_period: 20s
      test:
      - CMD-SHELL
      - pg_isready -d $${POSTGRES_DB} -U $${POSTGRES_USER}
      timeout: 5s
    image: ${DOCKER_REGISTRY:-docker.io/library/}postgres:16-alpine
    labels:
      wud.watch: false
    restart: ${RESTART:-unless-stopped}
    volumes:
    - /share/docker_data/authentik/database:/var/lib/postgresql/data
  redis:
    command: --save 60 1 --loglevel warning
    healthcheck:
      interval: 30s
      retries: 5
      start_period: 20s
      test:
      - CMD-SHELL
      - redis-cli ping | grep PONG
      timeout: 3s
    image: ${DOCKER_REGISTRY:-docker.io/library/}redis:alpine
    labels:
      wud.watch: true
      wud.watch.digest: true
    restart: ${RESTART:-unless-stopped}
    volumes:
    - redis:/data
  server:
    command: server
    depends_on:
    - postgresql
    - redis
    environment:
      AUTHENTIK_POSTGRESQL__HOST: postgresql
      AUTHENTIK_POSTGRESQL__NAME: ${PG_DB:-authentik}
      AUTHENTIK_POSTGRESQL__PASSWORD: ${PG_PASS}
      AUTHENTIK_POSTGRESQL__USER: ${PG_USER:-authentik}
      AUTHENTIK_REDIS__HOST: redis
      AUTHENTIK_SECRET_KEY: $AUTHENTIK_SECRET_KEY
      TZ: Europe/Bratislava
    image: ${DOCKER_REGISTRY:-}ghcr.io/goauthentik/server:${AUTHENTIK_TAG:-2024.6.1}
    labels:
      homepage.container: authentik-server-1
      homepage.description: Authentification server
      homepage.group: Utilities
      homepage.href: https://auth.sectorq.eu
      homepage.icon: authentik.png
      homepage.name: Authentik
      homepage.server: my-docker
      homepage.weight: '10'
      homepage.widget.key: sVOwPPInTue7ZnvolmKG15hkE9gCyLcuAelLOQny6OIVn7JUilny9loPTG0v
      homepage.widget.type: authentik
      homepage.widget.url: https://auth.sectorq.eu
      wud.watch: true
      wud.watch.digest: true
    ports:
    - ${COMPOSE_PORT_HTTP:-9003}:9000
    - ${COMPOSE_PORT_HTTPS:-9453}:9443
    restart: ${RESTART:-unless-stopped}
    volumes:
    - /share/docker_data/authentik/media:/media
    - /share/docker_data/authentik/custom-templates:/templates
    - /var/run/docker.sock:/var/run/docker.sock
  worker:
    command: worker
    depends_on:
    - postgresql
    - redis
    environment:
      AUTHENTIK_POSTGRESQL__HOST: postgresql
      AUTHENTIK_POSTGRESQL__NAME: ${PG_DB:-authentik}
      AUTHENTIK_POSTGRESQL__PASSWORD: ${PG_PASS}
      AUTHENTIK_POSTGRESQL__USER: ${PG_USER:-authentik}
      AUTHENTIK_REDIS__HOST: redis
      AUTHENTIK_SECRET_KEY: $AUTHENTIK_SECRET_KEY
      TZ: Europe/Bratislava
    image: ${DOCKER_REGISTRY:-}ghcr.io/goauthentik/server:${AUTHENTIK_TAG:-2024.6.1}
    labels:
      wud.watch: true
      wud.watch.digest: true
    restart: ${RESTART:-unless-stopped}
    user: root
    volumes:
    - /var/run/docker.sock:/var/run/docker.sock
    - /share/docker_data/authentik/media:/media
    - /share/docker_data/authentik/certs:/certs
    - /share/docker_data/authentik/custom-templates:/templates
    
volumes:
  database:
    driver: local
  redis:
    driver: local