version: '3.2'

services:
  app:
    image: ghcr.io/goauthentik/server:2023.8
    restart: unless-stopped
    command: server
    env_file:
      - .env
      - .secret.env
    depends_on:
      - redis
    networks:
      default:
      apps:
        aliases:
          - authentik

  worker:
    image: ghcr.io/goauthentik/server:2023.8
    restart: unless-stopped
    command: worker
    user: root
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    env_file:
      - .env
      - .secret.env
    depends_on:
      - redis
    networks:
      default:

  redis:
    image: redis:alpine
    restart: unless-stopped
    networks:
      default:

networks:
  default:
  apps:
    external: true