authentik-setup/env.template at main · variablenix/authentik-setup · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
# =============================================================================
# Authentik environment variables template
# Copy to .env and fill in required values before deploying
#
# Generate required secrets:
#   PG_PASS:              openssl rand -base64 36 | tr -d '\n'
#   AUTHENTIK_SECRET_KEY: openssl rand -base64 60 | tr -d '\n'
#
# Never commit .env to version control — add it to .gitignore
# =============================================================================

# =============================================================================
# required
# =============================================================================

# PostgreSQL password
PG_PASS=REPLACE_WITH_GENERATED_PASSWORD

# Authentik secret key
AUTHENTIK_SECRET_KEY=REPLACE_WITH_GENERATED_SECRET

# =============================================================================
# optional — defaults shown
# =============================================================================

PG_USER=authentik
PG_DB=authentik

# Set to true to send anonymized crash reports to the Authentik team
AUTHENTIK_ERROR_REPORTING__ENABLED=false

# Authentik version tag — pin to a specific release for stability
# Check releases: https://github.com/goauthentik/authentik/releases
AUTHENTIK_TAG=2026.2.1

# Custom HTTP/HTTPS ports (defaults: 9000 / 9443)
# COMPOSE_PORT_HTTP=9000
# COMPOSE_PORT_HTTPS=9443

# =============================================================================
# email configuration (optional — required for password resets, notifications)
# Uncomment and configure for your provider
# =============================================================================

# --- Fastmail ---
# Use an app-specific password from:
# Settings → Privacy & Security → Connected Apps & API Tokens
# AUTHENTIK_EMAIL__HOST=smtp.fastmail.com
# AUTHENTIK_EMAIL__PORT=587
# AUTHENTIK_EMAIL__USERNAME=you@fastmail.com
# AUTHENTIK_EMAIL__PASSWORD=your-app-specific-password
# AUTHENTIK_EMAIL__USE_TLS=true
# AUTHENTIK_EMAIL__FROM=authentik@yourdomain.com

# --- Gmail ---
# Requires a Google App Password (not your main account password)
# Generate at: https://myaccount.google.com/apppasswords
# AUTHENTIK_EMAIL__HOST=smtp.gmail.com
# AUTHENTIK_EMAIL__PORT=587
# AUTHENTIK_EMAIL__USERNAME=you@gmail.com
# AUTHENTIK_EMAIL__PASSWORD=your-16-char-app-password
# AUTHENTIK_EMAIL__USE_TLS=true
# AUTHENTIK_EMAIL__FROM=noreply@yourdomain.com

# --- Office 365 ---
# AUTHENTIK_EMAIL__HOST=smtp.office365.com
# AUTHENTIK_EMAIL__PORT=587
# AUTHENTIK_EMAIL__USERNAME=you@yourcompany.com
# AUTHENTIK_EMAIL__PASSWORD=your-password
# AUTHENTIK_EMAIL__USE_TLS=true
# AUTHENTIK_EMAIL__FROM=noreply@yourcompany.com

# --- SendGrid ---
# AUTHENTIK_EMAIL__HOST=smtp.sendgrid.net
# AUTHENTIK_EMAIL__PORT=587
# AUTHENTIK_EMAIL__USERNAME=apikey
# AUTHENTIK_EMAIL__PASSWORD=your-sendgrid-api-key
# AUTHENTIK_EMAIL__USE_TLS=true
# AUTHENTIK_EMAIL__FROM=noreply@yourdomain.com

# --- Port 465 (SSL/TLS) alternative for any provider ---
# AUTHENTIK_EMAIL__PORT=465
# AUTHENTIK_EMAIL__USE_SSL=true
# AUTHENTIK_EMAIL__USE_TLS=false