-
-
Notifications
You must be signed in to change notification settings - Fork 716
Expand file tree
/
Copy pathdocker-compose.oidc.yml
More file actions
83 lines (78 loc) · 2.62 KB
/
Copy pathdocker-compose.oidc.yml
File metadata and controls
83 lines (78 loc) · 2.62 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
# Authentik (plus its Postgres) for OIDC development, opt-in because most work
# needs neither:
# docker compose -f docker-compose.oidc.yml up -d
#
# Its own compose project, so a `down --remove-orphans` here can never reach the
# dev stack. Joins romm_default, so bring the dev stack up first: Authentik
# reaches the dev Valkey and the backend reaches the issuer by name, while the
# browser uses the published port.
# Point RomM at it with the OIDC_* variables in .env.
name: romm-oidc
services:
romm-postgres-dev:
image: postgres:18-alpine
container_name: romm-postgresql-dev
restart: unless-stopped
env_file: .env
environment:
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-authentik}
POSTGRES_USER: ${POSTGRES_USER:-romm}
POSTGRES_DB: ${POSTGRES_DB:-authentik}
volumes:
- postgres-db:/var/lib/postgresql/data
ports:
- "5432:5432"
networks:
- romm_default
romm-authentik-server:
image: ghcr.io/goauthentik/server:2024.12.5
container_name: romm-authentik-server
restart: unless-stopped
command: server
env_file: .env
environment:
AUTHENTIK_REDIS__HOST: romm-valkey-dev
AUTHENTIK_POSTGRESQL__HOST: romm-postgres-dev
AUTHENTIK_POSTGRESQL__USER: ${POSTGRES_USER:-romm}
AUTHENTIK_POSTGRESQL__NAME: ${POSTGRES_DB:-authentik}
AUTHENTIK_POSTGRESQL__PASSWORD: ${POSTGRES_PASSWORD:-authentik}
AUTHENTIK_SECRET_KEY: ${AUTHENTIK_SECRET_KEY:-secret-key-default}
AUTHENTIK_BOOTSTRAP_PASSWORD: ${AUTHENTIK_BOOTSTRAP_PASSWORD:-password}
volumes:
- authentik-media:/media
- authentik-templates:/templates
ports:
- "9001:9000"
- "9444:9443"
depends_on:
- romm-postgres-dev
networks:
- romm_default
romm-authentik-worker:
image: ghcr.io/goauthentik/server:2024.12.5
container_name: romm-authentik-worker
restart: unless-stopped
command: worker
env_file: .env
environment:
AUTHENTIK_REDIS__HOST: romm-valkey-dev
AUTHENTIK_POSTGRESQL__HOST: romm-postgres-dev
AUTHENTIK_POSTGRESQL__USER: ${POSTGRES_USER:-romm}
AUTHENTIK_POSTGRESQL__NAME: ${POSTGRES_DB:-authentik}
AUTHENTIK_POSTGRESQL__PASSWORD: ${POSTGRES_PASSWORD:-authentik}
AUTHENTIK_SECRET_KEY: ${AUTHENTIK_SECRET_KEY:-secret-key-default}
AUTHENTIK_BOOTSTRAP_PASSWORD: ${AUTHENTIK_BOOTSTRAP_PASSWORD:-password}
volumes:
- authentik-media:/media
- authentik-templates:/templates
depends_on:
- romm-postgres-dev
networks:
- romm_default
volumes:
postgres-db:
authentik-media:
authentik-templates:
networks:
romm_default:
external: true