Moved to _dev

authentik/authentik Self-signed Certificate_certificate.pem

@@ -0,0 +1,31 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

authentik/authentik Self-signed Certificate_private_key.pem

@@ -0,0 +1,51 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIIJKAIBAAKCAgEAyz/EnjizgNvTuKX/mDn+IwWJWFKAphVuNtCmg0dWv79JofaI
+8R16QXpKL4WGTByK9CzPpE/IsvRsiS04WEV+FUVTNG+CCSZUuZKqgl20XiFk5QTD
+a1RUXrHWKS4owMtppnLy/gO6/cpJPvYOwO0RVmAQBohCukPoG/vjUh/Jyd3sSdq5
+A9K6TgcGUZk8SrFgW1RWA5dn+F7pssEVjLst96bMFknD8zfQ8V9cQOKsHf6RmCTt
+iz0tZ6P/QxSoWRnB19oNnQESuau7XMTJSYka4LnharSuZFeYqfnUYFlDScsrEivo
+uOdo05TtbBRbLHDaVjXCWfe7UOslzzLYPu08RfPAlgLQXN1vhEroJNbY/8jMD0bQ
+5cogMMzhllBm6Z0pJgWgX+ZiKTHgKDxKhz/z9FUpw99W9tEKH4lknKz5aFINr6Zt
+hTnTV3fOxhTU49feak6jFj18ssxdyzpfoMg8xjfqqA5aA+yKfOmxxGJYJhuZGtXZ
+Xc1yqAwa9RjGbCd6En0yqk96QfFLTvQYX9EKCDfnYFS8mqLOIotsnqDpYr8Zehr8
+aCUWlTegRe7H8/KcMe/uwhfOpZ4i+gkwC36gIwRXi10kH8gkQyw61YKd9uIJFYUZ
+jaZQNxZFNQqMixownKTqRPru6YUNrD3Kgu+EI4gVh8gUJ/U3jBgV36c9moECAwEA
+AQKCAgAUzH0/3biMxrIXUrFhsAmQJuhjp+mvVUEWjeqEQ6AediJAVzyzQ9t3aN6/
+ly/jiQY1L4K+I0X7/iQ/M2fxLIdXAOWfV4vciNYhuV8GgTVMbqlnAEJJMPODTzqF
+s0oLVKWGmXvBP7t6biFptn9TAc+E4cayDG6bpghSGMgt5r/dDv83nZDSUdWr128v
+mXlAgX9FSU+WBX/nvDq5BqZAZQUysxhubXUGZh9VG/eSUj/fv+XBRoIifguv7+nW
+wP3rREYAYzmCaBI0+txtBVw90LB177+gDkZMUWR3fG/dvjSzD/3j2adyiIfDIxna
+tgiQdyn4qX6ueznpcW7IkcDsS5Wfui/RXwpF8v+jpMAp74/+tufrWW09cntWPO9R
+cYGUWuGEAaGVRxLMLhKoYu+xh1vXhpjzEoHis4gGu3Eyi/T2bfH1Uy6BFfaIaRbx
+Si6QMhF8pDiTCjxuNqn6fT1TopVgbRFYIWEv2cUMiXKetWnwwtMMzHE4Wp9fWa/y
+Ifteq34wy7DJj0tXW05alfhDjlxhtFPv6b06Fd9YL9+OaIA1T1bcx+gQjgYXBcYp
+u+mNTSvtWVhEkyALcho8d7tVnxd7UvhrqTbuim63sfDdYrapchDgWp9vRRlR4MKw
+KtxWO1s35u+wO6IIJ7JH6/tjyuQKP+xirsN1bPGW4BKy9witOQKCAQEA7+LT/ycm
+WR22esY04a2ijzVCUbMoOpPrmRQdUK64r08+K7YfPpaUmKJHYMtCDzYFyoKIhU4I
+zF2S3HN0/CVBjSCLqgIeVvLSuoZ+B0Vu2lvVxcgtGBaHI9/KMa78DKx4KDwksQ2v
+8nATNqVvN8KvERR/Xu+9RgTqFx7yHCPeK7kr1VM1PqIofBywzFxtEPseW8toY1+B
+oZ3nXGe9jkQgf2SeS7gogebsvqBfuSFZ0mNYyzQ//Y34g/wwR0puKbi0baah2k6V
+KaAN+4u6y2UwNjl+St1KOwEyn2q+Q4KZ2X/pyg57i6j/MJUJ4kmf/iHP4m6vNR8e
+088xMEn6Fv7BdQKCAQEA2ObquuZYf6PeQA9cDUvz0SVEf61Fjw9YJPOcbd0b0lCp
+rsIeRpGHxxyJZuXgs2jLMlzPJ7AOvBm68O3L3L7CqrnAN+XdxiEIrQu57ySZcH77
+6lGicJlSpa3ihri9n8sNGEKTEEsUItYhdYwWkCdVE7mCRXXNWU7wNUEvobWYu+qS
+33eU+XLS1YUel2SNebDRNjpOVpcbSonWZsdpYfF567i/YWAieIEiYT/k6KqLcLLm
+84og3Ri+4niH1fHasiKQQhLbNeUk4ItDxAtfXWunNXJSGSEbrlDoZ6Orwh1PpP0l
+q49hGTk2UlEkDjtJ4cJS4pGoEijij7417gQCDManXQKCAQA6OYEhRjxdlwOqqx88
+w6tYPSIauHSEO1EM97/hzHbRPlelvm+4/k2U+pZ+nPcsv/0J2UMPsBAcon25+mAj
+r1tIyOR9YERC8G9LjMdcNnMglve9KMghN56Xi4MFKibNYLNNeMOjIeJZ4vAW7HKh
+QyTA7Yu43FHBhAHZmM5FHEOZszk7bxXWXP+cmE4lXC2w2HLW7vkoXY8WTkBQwnFU
+7Z5BrYdqc4mJdiZyYnS5d6nYkfqEX+tEPMhcKMMDGsLAZ6+Lic1xMm+sCcg7DQBK
+zAW2s5++xhV1WuYRoZQKyNFU5GI3g+pizKMcBKDAhwRJZ6WQnTLzntkZqgmTYfFM
+0YrdAoIBADhnA88KKyU15Yte8x76CzLtr/xLgHUNFmy1dI4VGzD7jMRG8jyDh309
+bHV3fZDpxT0ZaTz2yT4cqsIP9B049cITf2qJubvVxz3IeNc4+zWHr9Zk2ArTs+wl
+ZWyHCbhNwt/2H+vyug+9AwJgJVXjBHqWmMubMITyw//1LX+ti0QCYaL+o5yiQTUI
+4sWXfjqQwjaJvulBbfVaFoivfjXb50pmxk16BDy1x8zmIo5mGtB5lRjraFRWJP0b
+Pqdhtu7vkfe8k4hWR9qkHEEUe/39CoQZcEPcmiggHe8lXnqhyJ4svej45dT7Tabm
+NqwEutecApWsLrpaK2AZpEh6flX4KnkCggEBAJdICoVNsQasg6hAIEdUjMQXm8Mc
+mXDLCi8P4V01RhJlAAASjpQ2a46+fUvCLinSMwOzPRDj46D/8fw+F0poRahRYlk+
+W2oM8DPmU8+HrJghsxGicU3fOrDlalttwzxDxuazCTwO3kNpAjNRc0YbaGhwb4uK
+OZjMtC8BUrOnKAXhw1sEipMUnN79lH+W3YiMfltpAAp2m1Owusfu1nMBkGMcHRT/
+T4jF02rgY3sx63LzVvPSRm6Qg638jUuQPS+yxmwGHa3Z4409DxB0yPoq3OW4bPhO
+j/k9QLXdABqMYL6F14Am2fcuRDofCBgekbfn1fh3Cdmf8YMxGZWWWWoE3tE=
+-----END RSA PRIVATE KEY-----

authentik/compose.env

@@ -0,0 +1,16 @@
+COMPOSE_PORT_HTTP=62751
+COMPOSE_PORT_HTTPS=62752
+PG_PASS=7n7mXBhgI2wOUm1CAEErgbnWX7wK9fNn6wXH2eVnZSfadUEt
+AUTHENTIK_SECRET_KEY=3R85z4JsPEKLKSFi+oxaoKypRlFkGctjElmNSiLzyafKlWfcRr+Y62yHfTBfedY19pv2fswhGL2F8TbU
+AUTHENTIK_BOOTSTRAP_EMAIL=admin@delmar.bzh
+AUTHENTIK_BOOTSTRAP_PASSWORD=X5r53JMPVg97EKfL
+AUTHENTIK_BOOTSTRAP_TOKEN=rzDMUWQOxOWQIYXPcVY2XKlwgTau4vOSfaSfVYsLWQQSUUITAVDY3lqwvoTbUMVD
+AUTHENTIK_ERROR_REPORTING__ENABLED=true
+AUTHENTIK_EMAIL__HOST=pro1.mail.ovh.net
+AUTHENTIK_EMAIL__PORT=587
+AUTHENTIK_EMAIL__USERNAME=admin@delmar.bzh
+AUTHENTIK_EMAIL__PASSWORD=sxS4GA8rBfmFkCFL
+AUTHENTIK_EMAIL__USE_TLS=true
+AUTHENTIK_EMAIL__USE_SSL=false
+AUTHENTIK_EMAIL__TIMEOUT=10
+AUTHENTIK_EMAIL__FROM=admin@delmar.bzh

authentik/compose.yaml

@@ -0,0 +1,95 @@
+volumes:
+  database:
+  redis:
+
+services:
+  postgresql:
+    container_name: authentik_postgres
+    image: docker.io/library/postgres:16-alpine
+    restart: unless-stopped
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -d $${POSTGRES_DB} -U $${POSTGRES_USER}"]
+      start_period: 20s
+      interval: 30s
+      retries: 5
+      timeout: 5s
+    volumes:
+      - database:/var/lib/postgresql/data
+    environment:
+      POSTGRES_PASSWORD: ${PG_PASS:?database password required}
+      POSTGRES_USER: ${PG_USER:-authentik}
+      POSTGRES_DB: ${PG_DB:-authentik}
+#    env_file:
+#      - compose.env
+
+  redis:
+    container_name: authentik_redis
+    image: docker.io/library/redis:alpine
+    command: --save 60 1 --loglevel warning
+    restart: unless-stopped
+    healthcheck:
+      test: ["CMD-SHELL", "redis-cli ping | grep PONG"]
+      start_period: 20s
+      interval: 30s
+      retries: 5
+      timeout: 3s
+    volumes:
+      - redis:/data
+
+  server:
+    container_name: authentik_server
+    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2025.4.0}
+    restart: unless-stopped
+    command: server
+    environment:
+      AUTHENTIK_SECRET_KEY: ${AUTHENTIK_SECRET_KEY:?secret key required}
+      AUTHENTIK_REDIS__HOST: redis
+      AUTHENTIK_POSTGRESQL__HOST: postgresql
+      AUTHENTIK_POSTGRESQL__USER: ${PG_USER:-authentik}
+      AUTHENTIK_POSTGRESQL__NAME: ${PG_DB:-authentik}
+      AUTHENTIK_POSTGRESQL__PASSWORD: ${PG_PASS}
+    volumes:
+      - ./media:/media
+      - ./custom-templates:/templates
+#    env_file:
+#      - compose.env
+    ports:
+      - "${COMPOSE_PORT_HTTP:-9000}:9000"
+      - "${COMPOSE_PORT_HTTPS:-9443}:9443"
+    depends_on:
+      postgresql:
+        condition: service_healthy
+      redis:
+        condition: service_healthy
+
+  worker:
+    container_name: authentik_worker
+    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2025.4.0}
+    restart: unless-stopped
+    command: worker
+    environment:
+      AUTHENTIK_SECRET_KEY: ${AUTHENTIK_SECRET_KEY:?secret key required}
+      AUTHENTIK_REDIS__HOST: redis
+      AUTHENTIK_POSTGRESQL__HOST: postgresql
+      AUTHENTIK_POSTGRESQL__USER: ${PG_USER:-authentik}
+      AUTHENTIK_POSTGRESQL__NAME: ${PG_DB:-authentik}
+      AUTHENTIK_POSTGRESQL__PASSWORD: ${PG_PASS}
+    # `user: root` and the docker socket volume are optional.
+    # See more for the docker socket integration here:
+    # https://goauthentik.io/docs/outposts/integrations/docker
+    # Removing `user: root` also prevents the worker from fixing the permissions
+    # on the mounted folders, so when removing this make sure the folders have the correct UID/GID
+    # (1000:1000 by default)
+    user: root
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock
+      - ./media:/media
+      - ./certs:/certs
+      - ./custom-templates:/templates
+#    env_file:
+#      - compose.env
+    depends_on:
+      postgresql:
+        condition: service_healthy
+      redis:
+        condition: service_healthy

authentik/nextcloud.txt

@@ -0,0 +1,2 @@
+Rr23j09gXB66exXkRg8GK0Yc8XvTM9wZc1jc30MV
+AZvPpQLKhUrLVZwpczXeCkQvi2tipsX1pcMgIYzD23TZ5bCNUo9warxrRxduFTXUo9tG3bIpyDying2ei2pUuJPbm3LJbuONydJsLa15Dtns6yjsIfK4sgfShRmGltUu