Initial import

2026-07-11 17:08:37 +00:00
commit 03e5f3452b
303 changed files with 43365 additions and 0 deletions
@@ -0,0 +1,85 @@
+name: thlab-id
+
+########## ===== ANCHORS ===== ##########
+
+x-authentik-env: &authentik-env
+  AUTHENTIK_POSTGRESQL__HOST: thlab-postgres
+  AUTHENTIK_POSTGRESQL__PORT: 5432
+  AUTHENTIK_POSTGRESQL__NAME: authentik
+
+  AUTHENTIK_ERROR_REPORTING__ENABLED: false
+  AUTHENTIK_LOG_LEVEL: info
+
+########## ===== NETWORKS ===== ##########
+
+networks:
+
+  thlab_proxy:
+    name: thlab_proxy
+
+  thlab_backend:
+    name: thlab_backend
+
+########## ===== VOLUMES ===== ##########
+
+volumes:
+
+  authentik_media:
+    name: thlab_authentik_media
+    driver: local
+
+  authentik_templates:
+    name: thlab_authentik_template
+    driver: local
+
+########## ===== SERVICES ===== ##########
+
+services:
+
+##### AUTHENTIK SERVER #####
+
+  thlab-authentik:
+
+    image: ghcr.io/goauthentik/server:2026.5.3
+    container_name: thlab-authentik
+
+    restart: unless-stopped
+    command: server
+
+    env_file: [.secrets/.env]
+    environment: *authentik-env
+
+    volumes:
+      - authentik_media:/media
+      - authentik_templates:/templates
+
+    networks:
+      - thlab_proxy
+      - thlab_backend
+
+##### AUTHENTIK WORKER #####
+
+  thlab-authentik-worker:
+
+    image: ghcr.io/goauthentik/server:2026.5.3
+    container_name: thlab-authentik-worker
+
+    restart: unless-stopped
+    command: worker
+
+    env_file: [.secrets/.env]
+    environment: *authentik-env
+
+    volumes:
+      - authentik_media:/media
+      - authentik_templates:/templates
+
+      # Needed only if you want Authentik-managed outposts
+      - /var/run/docker.sock:/var/run/docker.sock
+
+    networks:
+      - thlab_backend
+
+    depends_on:
+      thlab-authentik:
+        condition: service_started
@@ -0,0 +1,42 @@
+name: thlab-secrets
+
+########## ===== NETWORKS ===== ##########
+
+networks:
+
+  thlab_proxy:
+    name: thlab_proxy
+
+  thlab_auth:
+    name: thlab_auth
+
+########## ===== VOLUMES ===== ##########
+
+volumes:
+
+  vaultwarden_data:
+    name: thlab_vaultwarden
+    driver: local
+
+########## ===== SERVICES ===== ##########
+
+services:
+
+##### VAULTWARDEN
+  thlab-vaultwarden:
+
+    image: vaultwarden/server:latest
+    container_name: thlab-vaultwarden
+    restart: unless-stopped
+
+    env_file: [.secrets/.env]
+    environment:
+      WEBSOCKET_ENABLED: "true"
+      LOG_LEVEL: warn
+
+    volumes:
+      - vaultwarden_data:/data
+
+    networks:
+      - thlab_proxy
+      - thlab_auth