authentik-worker
authentik-worker
Aplicación Docker from zuerrex's Repository
Visión general
Requisitos
Running as non-root
If you remove --user root from Extra Parameters, you must ensure file/share permissions are handled manually so the worker can read/write any mapped paths.
Docker socket options (choose ONE):
1- Direct socket (easiest, least safe):
Map /var/run/docker.sock and set the socket path in the template. This gives Authentik broad Docker control - use only in trusted environments.
2- Socket-proxy:
Point Authentik’s Outpost Integration to your proxy and enable only the endpoints needed for outpost lifecycle:
IMAGES=1, CONTAINERS=1, POST=1, INFO=1, VERSION=1
Type: Docker Service-Connection, URL: http://socket-proxy:2375, Local: toggled off
3- No socket (recommended):
Don’t expose Docker Socket at all. Manage outposts manually from Authentik (create/update/remove them yourself).
Argumentos en tiempo de ejecución
- Red
bridge- Concha
sh- Privilegiado
- false
- Parámetros adicionales
--user root
Configuración de plantillas
Cryptographic key for Authentik.
- Objetivo
- AUTHENTIK_SECRET_KEY
Host/IP of the Redis server.
- Objetivo
- AUTHENTIK_REDIS__HOST
- Por defecto
- redis
- Valor
- redis
Password of Redis server.
- Objetivo
- AUTHENTIK_REDIS__PASSWORD
Host/IP of the PostgreSQL database.
- Objetivo
- AUTHENTIK_POSTGRESQL__HOST
- Por defecto
- postgresql16
- Valor
- postgresql
Username for PostgreSQL access.
- Objetivo
- AUTHENTIK_POSTGRESQL__USER
- Por defecto
- postgres
- Valor
- postgres
Name of the PostgreSQL database.
- Objetivo
- AUTHENTIK_POSTGRESQL__NAME
- Por defecto
- authentik
- Valor
- authentik
Password for the PostgreSQL user.
- Objetivo
- AUTHENTIK_POSTGRESQL__PASSWORD
Mounts Docker socket for container management.
- Objetivo
- /var/run/docker.sock
Stores uploaded media and assets.
- Objetivo
- /media
- Por defecto
- /mnt/user/appdata/authentik/media
- Valor
- /mnt/user/appdata/authentik/media
Stores SSL/TLS certificates.
- Objetivo
- /certs
- Por defecto
- /mnt/user/appdata/authentik/certs
- Valor
- /mnt/user/appdata/authentik/certs
Stores custom Authentik templates.
- Objetivo
- /templates
- Por defecto
- /mnt/user/appdata/authentik/templates
- Valor
- /mnt/user/appdata/authentik/templates
Enable/disable sending error reports (true/false).
- Objetivo
- AUTHENTIK_ERROR_REPORTING__ENABLED
- Por defecto
- true
- Valor
- true
SMTP server hostname.
- Objetivo
- AUTHENTIK_EMAIL__HOST
- Por defecto
- smtp.gmail.com
- Valor
- smtp.gmail.com
SMTP server port.
- Objetivo
- AUTHENTIK_EMAIL__PORT
- Por defecto
- 587
- Valor
- 587
SMTP account username.
- Objetivo
- AUTHENTIK_EMAIL__USERNAME
- Por defecto
- example@localhost
For Gmail, visit https://myaccount.google.com/apppasswords
- Objetivo
- AUTHENTIK_EMAIL__PASSWORD
Enable TLS for SMTP (true/false).
- Objetivo
- AUTHENTIK_EMAIL__USE_TLS
- Por defecto
- true
- Valor
- true
Enable SSL for SMTP (true/false).
- Objetivo
- AUTHENTIK_EMAIL__USE_SSL
- Por defecto
- false
- Valor
- false
SMTP timeout in seconds.
- Objetivo
- AUTHENTIK_EMAIL__TIMEOUT
- Por defecto
- 10
- Valor
- 10
Default “From” email address.
- Objetivo
- AUTHENTIK_EMAIL__FROM
- Por defecto
- authintik@localhost
Detalles
ghcr.io/goauthentik/server:2025.8.1Ejecute authentik-worker en Unraid.
authentik-worker se encuentra en Community Apps para Unraid OS. Explore Unraid para crear un servidor doméstico flexible, un NAS o un laboratorio doméstico.