authentik-worker

概述

The Authentik worker container processes background jobs, scheduled tasks, and asynchronous operations for the server. It handles actions such as sending emails, running LDAP/SCIM syncs, processing login events, and managing provisioning.

要求

The worker runs alongside the server and connects to the same PostgreSQL (16 and above) and Redis instances. It depends on PostgreSQL and Redis, install them first.

Running as non-root
If you remove --user root from Extra Parameters, you must ensure file/share permissions are handled manually so the worker can read/write any mapped paths.

Docker socket options (choose ONE):
1- Direct socket (easiest, least safe):
Map /var/run/docker.sock and set the socket path in the template. This gives Authentik broad Docker control - use only in trusted environments.
2- Socket-proxy:
Point Authentik’s Outpost Integration to your proxy and enable only the endpoints needed for outpost lifecycle:
IMAGES=1, CONTAINERS=1, POST=1, INFO=1, VERSION=1
Type: Docker Service-Connection, URL: http://socket-proxy:2375, Local: toggled off
3- No socket (recommended):
Don’t expose Docker Socket at all. Manage outposts manually from Authentik (create/update/remove them yourself).

运行时参数

网络: bridge
外壳: sh
特权: false
额外参数: --user root

模板配置

Secret KeyVariable

Cryptographic key for Authentik.

目标: AUTHENTIK_SECRET_KEY

Redis HostVariable

Host/IP of the Redis server.

目标: AUTHENTIK_REDIS__HOST
默认值: redis
价值: redis

Redis PasswordVariable

Password of Redis server.

目标: AUTHENTIK_REDIS__PASSWORD

PostgreSQL HostVariable

Host/IP of the PostgreSQL database.

目标: AUTHENTIK_POSTGRESQL__HOST
默认值: postgresql16
价值: postgresql

PostgreSQL UserVariable

Username for PostgreSQL access.

目标: AUTHENTIK_POSTGRESQL__USER
默认值: postgres
价值: postgres

PostgreSQL Database NameVariable

Name of the PostgreSQL database.

目标: AUTHENTIK_POSTGRESQL__NAME
默认值: authentik
价值: authentik

PostgreSQL PasswordVariable

Password for the PostgreSQL user.

目标: AUTHENTIK_POSTGRESQL__PASSWORD

Docker Socket VolumePathrw

Mounts Docker socket for container management.

目标: /var/run/docker.sock

Media VolumePathrw

Stores uploaded media and assets.

目标: /media
默认值: /mnt/user/appdata/authentik/media
价值: /mnt/user/appdata/authentik/media

Certificates VolumePathrw

Stores SSL/TLS certificates.

目标: /certs
默认值: /mnt/user/appdata/authentik/certs
价值: /mnt/user/appdata/authentik/certs

Custom Templates VolumePathrw

Stores custom Authentik templates.

目标: /templates
默认值: /mnt/user/appdata/authentik/templates
价值: /mnt/user/appdata/authentik/templates

Enable Error ReportingVariable

Enable/disable sending error reports (true/false).

目标: AUTHENTIK_ERROR_REPORTING__ENABLED
默认值: true
价值: true

Email HostVariable

SMTP server hostname.

目标: AUTHENTIK_EMAIL__HOST
默认值: smtp.gmail.com
价值: smtp.gmail.com

Email PortVariable

SMTP server port.

目标: AUTHENTIK_EMAIL__PORT
默认值: 587
价值: 587

Email UsernameVariable

SMTP account username.

目标: AUTHENTIK_EMAIL__USERNAME
默认值: example@localhost

Email PasswordVariable

For Gmail, visit https://myaccount.google.com/apppasswords

目标: AUTHENTIK_EMAIL__PASSWORD

Email Use TLSVariable

Enable TLS for SMTP (true/false).

目标: AUTHENTIK_EMAIL__USE_TLS
默认值: true
价值: true

Email Use SSLVariable

Enable SSL for SMTP (true/false).

目标: AUTHENTIK_EMAIL__USE_SSL
默认值: false
价值: false

Email TimeoutVariable

SMTP timeout in seconds.

目标: AUTHENTIK_EMAIL__TIMEOUT
默认值: 10
价值: 10

Email From AddressVariable

Default “From” email address.

目标: AUTHENTIK_EMAIL__FROM
默认值: authintik@localhost

类别

Network > Management Security Tools > Utilities

链接

模板支持登记处 Pro连接

详细信息

存储库

ghcr.io/goauthentik/server:2025.8.1

登记处

https://github.com/goauthentik/authentik

最后更新2026-06-02

初见2025-08-28

在Unraid 上运行 authentik-worker 。

authentik-worker 已被列入Unraid OS 的社区应用程序。探索Unraid ，构建灵活的家庭服务器、NAS 或家庭实验室。

探索Unraid OS