name: pflab-id

########## ===== ANCHORS ===== ##########

x-authentik-env: &authentik-env
  AUTHENTIK_POSTGRESQL__HOST: pflab-postgres
  AUTHENTIK_POSTGRESQL__PORT: 5432
  AUTHENTIK_POSTGRESQL__NAME: authentik

  AUTHENTIK_ERROR_REPORTING__ENABLED: false
  AUTHENTIK_LOG_LEVEL: info

########## ===== NETWORKS ===== ##########

networks:

  pflab_proxy:
    name: pflab_proxy

  pflab_backend:
    name: pflab_backend

########## ===== VOLUMES ===== ##########

volumes:

  authentik_media:
    name: pflab_authentik_media
    driver: local

  authentik_templates:
    name: pflab_authentik_template
    driver: local

########## ===== SERVICES ===== ##########

services:

##### AUTHENTIK SERVER #####

  pflab-authentik:

    image: ghcr.io/goauthentik/server:2026.5.3
    container_name: pflab-authentik

    restart: unless-stopped
    command: server

    env_file: [.secrets/.env]
    environment: *authentik-env

    volumes:
      - authentik_media:/media
      - authentik_templates:/templates

    networks:
      - pflab_proxy
      - pflab_backend

##### AUTHENTIK WORKER #####

  pflab-authentik-worker:

    image: ghcr.io/goauthentik/server:2026.5.3
    container_name: pflab-authentik-worker

    restart: unless-stopped
    command: worker

    env_file: [.secrets/.env]
    environment: *authentik-env

    volumes:
      - authentik_media:/media
      - authentik_templates:/templates

      # Needed only if you want Authentik-managed outposts
      - /var/run/docker.sock:/var/run/docker.sock

    networks:
      - pflab_backend

    depends_on:
      pflab-authentik:
        condition: service_started