services:
  server:
    command: server
    env_file:
    - .env
    environment:
      AUTHENTIK_POSTGRESQL__HOST: 192.168.1.170
      AUTHENTIK_POSTGRESQL__NAME: authentik
      AUTHENTIK_POSTGRESQL__PASSWORD: 2h1y7H1kjdfdCLmd992SDL2iwtyjZ1iZb2X4SROK4GMvBiht
      AUTHENTIK_POSTGRESQL__USER: authentik
      AUTHENTIK_SECRET_KEY: ${AUTHENTIK_SECRET_KEY:?secret key required}
      AUTHENTIK_LISTEN__TRUSTED_PROXY_CIDRS: 169.255.58.144/32, 192.168.1.0/24
      AUTHENTIK_HOST_BROWSER: https://id.khongisa.co.za
      AUTHENTIK_HOST: https://id.khongisa.co.za
      AUTHENTIK_INSECURE: false
      AUTHENTIK_ERROR_REPORTING__ENABLED: true
      COMPOSE_PORT_HTTP: 80
      COMPOSE_PORT_HTTPS: 443
      AUTHENTIK_EMAIL__HOST: mail.litecharms.co.za
      AUTHENTIK_EMAIL__PORT: 465
      AUTHENTIK_EMAIL__USERNAME: authentik@litecharms.co.za
      AUTHENTIK_EMAIL__PASSWORD: N<7`7986ZyHL
      AUTHENTIK_EMAIL__USE_TLS: true
      AUTHENTIK_EMAIL__USE_SSL: true
      AUTHENTIK_EMAIL__TIMEOUT: 10
      AUTHENTIK_EMAIL__FROM: authentik@litecharms.co.za
      AUTHENTIK_POSTGRESQL__CONN_MAX_AGE: 60
      AUTHENTIK_POSTGRESQL__CONN_HEALTH_CHECKS: "true"
      AUTHENTIK_WORKER__THREADS: 8
      AUTHENTIK_POSTGRESQL__DISABLE_SERVER_SIDE_CURSORS: "true"
      AUTHENTIK_SERVER__WORKERS: 3
      AUTHENTIK_SERVER__THREADS: 4
      AUTHENTIK_LOG_LEVEL: warning
    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2026.2.1}
    ports:
    - ${COMPOSE_PORT_HTTP:-9000}:9000
    - ${COMPOSE_PORT_HTTPS:-9443}:9443
    restart: unless-stopped
    shm_size: 512mb
    volumes:
    - ./data:/data
    - ./custom-templates:/templates
  worker:
    command: worker
    env_file:
    - .env
    environment:
      AUTHENTIK_POSTGRESQL__HOST: 192.168.1.170
      AUTHENTIK_POSTGRESQL__NAME: authentik
      AUTHENTIK_POSTGRESQL__PASSWORD: 2h1y7H1kjdfdCLmd992SDL2iwtyjZ1iZb2X4SROK4GMvBiht
      AUTHENTIK_POSTGRESQL__USER: authentik
      AUTHENTIK_SECRET_KEY: ${AUTHENTIK_SECRET_KEY:?secret key required}
      AUTHENTIK_LISTEN__TRUSTED_PROXY_CIDRS: 169.255.58.144/32, 192.168.1.0/24
      AUTHENTIK_HOST_BROWSER: https://id.khongisa.co.za
      AUTHENTIK_HOST: https://id.khongisa.co.za
      AUTHENTIK_INSECURE: false
      AUTHENTIK_ERROR_REPORTING__ENABLED: true
      COMPOSE_PORT_HTTP: 80
      COMPOSE_PORT_HTTPS: 443
      AUTHENTIK_EMAIL__HOST: mail.litecharms.co.za
      AUTHENTIK_EMAIL__PORT: 465
      AUTHENTIK_EMAIL__USERNAME: authentik@litecharms.co.za
      AUTHENTIK_EMAIL__PASSWORD: N<7`7986ZyHL
      AUTHENTIK_EMAIL__USE_TLS: true
      AUTHENTIK_EMAIL__USE_SSL: true
      AUTHENTIK_EMAIL__TIMEOUT: 10
      AUTHENTIK_EMAIL__FROM: authentik@litecharms.co.za
      AUTHENTIK_POSTGRESQL__CONN_MAX_AGE: 60
      AUTHENTIK_POSTGRESQL__CONN_HEALTH_CHECKS: "true"
      AUTHENTIK_POSTGRESQL__DISABLE_SERVER_SIDE_CURSORS: "true"
      AUTHENTIK_WORKER__PROCESSES: 2
      AUTHENTIK_WORKER__THREADS: 12
      AUTHENTIK_LOG_LEVEL: warning
      AUTHENTIK_BLUEPRINTS__RESCAN: "false"
    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2026.2.1}
    restart: unless-stopped
    shm_size: 512mb
    user: root
    volumes:
    - /var/run/docker.sock:/var/run/docker.sock
    - ./data:/data
    - ./certs:/certs
    - ./custom-templates:/templates
volumes:
  database:
    driver: local