Incorporate Authentik into Nextcloud

[FlattusBlastus]

authentik-docker-compose.yml

version: "3.8"
networks:
nextcloud-aio:
name: nextcloud-aio
external: true
driver: bridge
enable_ipv6: true
ipam:
driver: default
config:
- subnet: fd12:3456:789a:2::/64 # IPv6 subnet to use
services:
server:
image: ghcr.io/goauthentik/server:latest
restart: unless-stopped
container_name: authentik-server
command: server
environment:
AUTHENTIK_REDIS__HOST: nextcloud-aio-redis
AUTHENTIK_REDIS__PASSWORD: [get it from inspecting nextcloud-aio-redis]
AUTHENTIK_POSTGRESQL__HOST: nextcloud-aio-database
AUTHENTIK_POSTGRESQL__USER: nextcloud
AUTHENTIK_POSTGRESQL__NAME: nextcloud_database
AUTHENTIK_POSTGRESQL__PASSWORD: [get it from inspecting nextcloud-aio-database]
AUTHENTIK_SECRET_KEY: [make a 50 to 64 character key of your own]
volumes:
- /c/dockerdata/authentik:/media
- /c/dockerdata/authentik/templates:/templates
ports:
- 9000:9000
- 9443:9443
networks:
- nextcloud-aio
labels:
- com.centurylinklabs.watchtower.enable=true
worker:
image: ghcr.io/goauthentik/server:latest
restart: unless-stopped
container_name: authentik-worker
command: worker
environment:
AUTHENTIK_REDIS__HOST: nextcloud-aio-redis
AUTHENTIK_REDIS__PASSWORD: [get it from inspecting nextcloud-aio-redis]
AUTHENTIK_POSTGRESQL__HOST: nextcloud-aio-database
AUTHENTIK_POSTGRESQL__USER: nextcloud
AUTHENTIK_POSTGRESQL__NAME: nextcloud_database
AUTHENTIK_POSTGRESQL__PASSWORD: [get it from inspecting nextcloud-aio-database]
AUTHENTIK_SECRET_KEY: [make a 50 to 64 character key of your own]
user: root
volumes:
- //var/run/docker.sock:/var/run/docker.sock
- /c/dockerdata/authentik:/media
- /c/dockerdata/authentik/certs:/certs
- /c/dockerdata/authentik/templates:/templates
networks:
- nextcloud-aio
labels:
- com.centurylinklabs.watchtower.enable=true

[szaimen]

I fear this does not pass all requirements for integrating this new container into AIO.
See https:/nextcloud/all-in-one#requirements-for-integrating-new-containers

However you might be interested in this feature: #1581

[FlattusBlastus]

Interesting! Bookmarked for investigation.

[szaimen]

Hi, I just wanted to mention that we have this now: https:/nextcloud/all-in-one/tree/main/community-containers#how-to-add-containers. So the community could potentially add authentik as additional container. Feel free to ping me if you should need help on this!

[FlattusBlastus]

Amazing work! I will give it a try!

…

________________________________ From: Simon L. ***@***.***> Sent: Thursday, September 28, 2023 5:17:02 AM To: nextcloud/all-in-one ***@***.***> Cc: FlattusBlastus ***@***.***>; Author ***@***.***> Subject: Re: [nextcloud/all-in-one] Incorporate Authentik into Nextcloud (Discussion #3218) Hi, I just wanted to mention that we have this now: https:/nextcloud/all-in-one/tree/main/community-containers#how-to-add-containers. So the community could potentially add authentik as additional container. Feel free to ping me if you should need help on this! — Reply to this email directly, view it on GitHub<#3218 (comment)>, or unsubscribe<https:/notifications/unsubscribe-auth/ASVVEUD3OFCSXKDSPO6U7ZTX4VTD5ANCNFSM6AAAAAA3ZB2YDU>. You are receiving this because you authored the thread.Message ID: ***@***.***>

[FlattusBlastus]

Hi Simon! I've asked the main devs of Kavita and Authentik if they could add their apps as community containers and if they didn't have time, if it's ok that I would. I will update my plans once I have the go ahead from either author. I would also emphasize to Windows DD users, just use the Windows version. In red, DONT USE WINDOWS DD FOR PLEX! It seems that the official docker has finally been updated. Pull this specific tag: plexinc/pms-docker:plexpass It contains native AMD support! (Scroll all the way to the bottom: https://forums.plex.tv/t/got-hw-transcoding-to-work-with-libva-vaapi-on-ryzen-apu-ryzen-7-4700u/676546/512) Kind regards, Charles Babcock

[FlattusBlastus]

One other bit. Indeed, network_mode: host doesn't work on Windows DD. Instruct users to use host.docker.internal:port instead which does work.

[Fuseteam]

did you ever get the go ahead?