feat: deploy Authentik with age-encrypted secrets
This commit is contained in:
parent
9f8f619f3e
commit
e966ec09ae
9 changed files with 240 additions and 260 deletions
31
env/common.env
vendored
Normal file
31
env/common.env
vendored
Normal file
|
|
@ -0,0 +1,31 @@
|
|||
# Deployment identity
|
||||
DEPLOYMENT_ENVIRONMENT=prod
|
||||
COMPOSE_PROJECT_NAME=sso-s1q-dev
|
||||
PUBLIC_DOMAIN=sso.s1q.dev
|
||||
TLS_DOMAIN=*.s1q.dev
|
||||
|
||||
# Explicit image versions. Update these values through Git.
|
||||
AUTHENTIK_TAG=2025.8.1
|
||||
POSTGRES_TAG=17.6-alpine
|
||||
REDIS_TAG=8.0-alpine
|
||||
GEOIPUPDATE_TAG=v7.1.1
|
||||
|
||||
# Authentik logging and error reporting
|
||||
AUTHENTIK_ERROR_REPORTING__ENABLED=true
|
||||
AUTHENTIK_LOG_LEVEL=warning
|
||||
|
||||
# Email
|
||||
AUTHENTIK_EMAIL__HOST=mail.s1q.dev
|
||||
AUTHENTIK_EMAIL__PORT=25
|
||||
AUTHENTIK_EMAIL__USERNAME=smtp@s1q.dev
|
||||
AUTHENTIK_EMAIL__USE_TLS=true
|
||||
AUTHENTIK_EMAIL__USE_SSL=false
|
||||
AUTHENTIK_EMAIL__TIMEOUT=10
|
||||
AUTHENTIK_EMAIL__FROM=sso@s1q.dev
|
||||
|
||||
# MaxMind GeoIP
|
||||
GEOIPUPDATE_ACCOUNT_ID=765001
|
||||
|
||||
# PostgreSQL
|
||||
PG_USER=authentik
|
||||
PG_DB=authentik
|
||||
Loading…
Add table
Add a link
Reference in a new issue