[Unit]
Description=Authentik server Service
Wants=network-online.target
After=network.target network-online.target authentik-postgres.container authentik-worker.service

[Container]
Pod=authentik.pod
ContainerName=authentik-server
Image=ghcr.io/goauthentik/server:2025.10 
AutoUpdate=registry
Exec=server
Environment=AUTHENTIK_POSTGRESQL__HOST=authentik-postgres
Secret=pg_db,type=env,target=AUTHENTIK_POSTGRESQL__NAME
Secret=pg_user,type=env,target=AUTHENTIK_POSTGRESQL__USER
Secret=pg_pw,type=env,target=AUTHENTIK_POSTGRESQL__PASSWORD
Environment=AUTHENTIK_DISABLE_STARTUP_ANALYTICS=true
Environment=AUTHENTIK_DISABLE_UPDATE_CHECK=true
Environment=AUTHENTIK_ERROR_REPORTING__ENABLED=false
Secret=secret_key,type=env,target=AUTHENTIK_SECRET_KEY
Volume=/var/vol/authentik/media:/media
Volume=/var/vol/authentik/certs:/certs
Volume=/var/vol/authentik/custom-templates:/templates

[Service]
Restart=on-failure
RestartSec=60
TimeoutStartSec=60

[Install]
WantedBy=multi-user.target default.target