docker-compose.yml

---version: "3.4" services:  postgresql:    container_name: authentik-db    image: docker.io/library/postgres:12-alpine    restart: unless-stopped    healthcheck:      test: ["CMD-SHELL", "pg_isready -d $${POSTGRES_DB} -U $${POSTGRES_USER}"]      start_period: 20s      interval: 30s      retries: 5      timeout: 5s    volumes:      - database:/var/lib/postgresql/data    environment:      POSTGRES_PASSWORD: ${PG_PASS:?database password required}      POSTGRES_USER: ${PG_USER:-authentik}      POSTGRES_DB: ${PG_DB:-authentik}    env_file:      - .env  redis:    container_name: authentik-redis    image: docker.io/library/redis:alpine    command: --save 60 1 --loglevel warning    restart: unless-stopped    healthcheck:      test: ["CMD-SHELL", "redis-cli ping | grep PONG"]      start_period: 20s      interval: 30s      retries: 5      timeout: 3s    volumes:      - redis:/data  server:    container_name: authentik-server    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2023.8.7}    restart: unless-stopped    command: server    environment:      AUTHENTIK_REDIS__HOST: redis      AUTHENTIK_POSTGRESQL__HOST: postgresql      AUTHENTIK_POSTGRESQL__USER: ${PG_USER:-authentik}      AUTHENTIK_POSTGRESQL__NAME: ${PG_DB:-authentik}      AUTHENTIK_POSTGRESQL__PASSWORD: ${PG_PASS}    volumes:      - ./media:/media      - ./custom-templates:/templates      - /data/misc/authentik/custom.css:/web/dist/custom.css    env_file:      - .env    ports:      - "${COMPOSE_PORT_HTTP:-9000}:9000"      - "${COMPOSE_PORT_HTTPS:-9443}:9443"    depends_on:      - postgresql      - redis  worker:    container_name: authentik-worker    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2023.8.7}    restart: unless-stopped    command: worker    environment:      AUTHENTIK_REDIS__HOST: redis      AUTHENTIK_POSTGRESQL__HOST: postgresql      AUTHENTIK_POSTGRESQL__USER: ${PG_USER:-authentik}      AUTHENTIK_POSTGRESQL__NAME: ${PG_DB:-authentik}      AUTHENTIK_POSTGRESQL__PASSWORD: ${PG_PASS}    # `user: root` and the docker socket volume are optional.    # See more for the docker socket integration here:    # https://goauthentik.io/docs/outposts/integrations/docker    # Removing `user: root` also prevents the worker from fixing the permissions    # on the mounted folders, so when removing this make sure the folders have the correct UID/GID    # (1000:1000 by default)    user: root    volumes:      - /var/run/docker.sock:/var/run/docker.sock      - ./media:/media      - ./certs:/certs      - ./custom-templates:/templates      - /data/misc/authentik/custom.css:/web/dist/custom.css    env_file:      - .env    depends_on:      - postgresql      - redis volumes:  database:    driver: local  redis:    driver: local