services:
  postgres:
    image: postgres:16-alpine
    restart: always
    environment:
      POSTGRES_PASSWORD: {{ global_db_pass }}
      POSTGRES_USER: authentik
      POSTGRES_DB: authentik
    volumes:
      - db_data:/var/lib/postgresql/data

  redis:
    image: redis:alpine
    restart: always
    command: redis-server --requirepass {{ global_redis_pass }}
    volumes:
      - redis_data:/data

  server:
    image: ghcr.io/goauthentik/server:2024.10
    restart: always
    command: server
    environment:
      AUTHENTIK_REDIS__HOST: redis
      AUTHENTIK_REDIS__PASSWORD: {{ global_redis_pass }}
      AUTHENTIK_POSTGRESQL__HOST: postgres
      AUTHENTIK_POSTGRESQL__USER: authentik
      AUTHENTIK_POSTGRESQL__NAME: authentik
      AUTHENTIK_POSTGRESQL__PASSWORD: {{ global_db_pass }}
      AUTHENTIK_SECRET_KEY: {{ authentik_secret }}
      AUTHENTIK_BOOTSTRAP_TIMEOUT: 300
    ports:
      - "9000:9000"
      - "9443:9443"
    depends_on:
      - postgres
      - redis

  worker:
    image: ghcr.io/goauthentik/server:2024.10
    restart: always
    command: worker
    environment:
      AUTHENTIK_REDIS__HOST: redis
      AUTHENTIK_REDIS__PASSWORD: {{ global_redis_pass }}
      AUTHENTIK_POSTGRESQL__HOST: postgres
      AUTHENTIK_POSTGRESQL__USER: authentik
      AUTHENTIK_POSTGRESQL__NAME: authentik
      AUTHENTIK_POSTGRESQL__PASSWORD: {{ global_db_pass }}
      AUTHENTIK_SECRET_KEY: {{ authentik_secret }}
      AUTHENTIK_BOOTSTRAP_TIMEOUT: 300
    depends_on:
      - postgres
      - redis

volumes:
  db_data:
  redis_data: