commit 8a548bd788eb1ff84442a1fc9fc72001f403f811
Author: phg <mail@philip-henning.com>
Date:   Thu Aug 28 22:28:11 2025 +0200

    initial commit

diff --git a/docker-compose.yml b/docker-compose.yml
new file mode 100644
index 0000000..7d8b8c2
--- /dev/null
+++ b/docker-compose.yml
@@ -0,0 +1,15 @@
+services:
+    authentik_proxy:
+        image: ghcr.io/goauthentik/proxy:${AUTHENTIK_TAG:?Authentik tag is not configured}
+        # Optionally specify the container's network, which must be able to reach the core authentik server.
+        # networks:
+        #   - foo
+        ports:
+            - 127.0.0.1:42080:42080
+            - 127.0.0.1:42443:42443
+        environment:
+            AUTHENTIK_HOST: ${AUTHENTIK_HOST:?Authentik host is not configured}
+            AUTHENTIK_INSECURE: "false"
+            AUTHENTIK_LISTEN__HTTP: "0.0.0.0:42080"
+            AUTHENTIK_LISTEN__HTTPS: "0.0.0.0:42443"
+            AUTHENTIK_TOKEN: ${AUTHENTIK_TOKEN:?Authentik token is not configured}
\ No newline at end of file
diff --git a/template.env b/template.env
new file mode 100644
index 0000000..3054730
--- /dev/null
+++ b/template.env
@@ -0,0 +1,5 @@
+AUTHENTIK_TAG=2025.8.1
+AUTHENTIK_HOST=https://sso.s1q.dev
+
+# Secrets
+# AUTHENTIK_TOKEN=  # Token generated by authentik