name: thlab-id

########## ===== ANCHORS ===== ##########

x-authentik-env: &authentik-env
  AUTHENTIK_POSTGRESQL__HOST: thlab-postgres
  AUTHENTIK_POSTGRESQL__PORT: 5432
  AUTHENTIK_POSTGRESQL__NAME: authentik

  AUTHENTIK_ERROR_REPORTING__ENABLED: false
  AUTHENTIK_LOG_LEVEL: info

########## ===== NETWORKS ===== ##########

networks:

  thlab_proxy:
    name: thlab_proxy

  thlab_backend:
    name: thlab_backend

########## ===== VOLUMES ===== ##########

volumes:

  authentik_media:
    name: thlab_authentik_media
    driver: local

  authentik_templates:
    name: thlab_authentik_template
    driver: local

########## ===== SERVICES ===== ##########

services:

##### AUTHENTIK SERVER #####

  thlab-authentik:

    image: ghcr.io/goauthentik/server:2026.5.3
    container_name: thlab-authentik

    restart: unless-stopped
    command: server

    env_file: [.secrets/.env]
    environment: *authentik-env

    volumes:
      - authentik_media:/media
      - authentik_templates:/templates

    networks:
      - thlab_proxy
      - thlab_backend

##### AUTHENTIK WORKER #####

  thlab-authentik-worker:

    image: ghcr.io/goauthentik/server:2026.5.3
    container_name: thlab-authentik-worker

    restart: unless-stopped
    command: worker

    env_file: [.secrets/.env]
    environment: *authentik-env

    volumes:
      - authentik_media:/media
      - authentik_templates:/templates

      # Needed only if you want Authentik-managed outposts
      - /var/run/docker.sock:/var/run/docker.sock

    networks:
      - thlab_backend

    depends_on:
      thlab-authentik:
        condition: service_started