1、创建docker-compose.yml
services:
postgresql:
container_name: postgresql
env_file:
- .env
environment:
POSTGRES_DB: ${PG_DB:-authentik}
POSTGRES_PASSWORD: ${PG_PASS:?database password required}
POSTGRES_USER: ${PG_USER:-authentik}
POSTGRES_IDLE_IN_TRANSACTION_SESSION_TIMEOUT: "60000"
POSTGRES_TCP_KEEPALIVES_IDLE: "60"
POSTGRES_TCP_KEEPALIVES_INTERVAL: "10"
POSTGRES_TCP_KEEPALIVES_COUNT: "6"
POSTGRES_MAX_CONNECTIONS: "200"
healthcheck:
interval: 30s
retries: 5
start_period: 20s
test:
- CMD-SHELL
- pg_isready -d $${POSTGRES_DB} -U $${POSTGRES_USER}
timeout: 5s
image: docker.io/library/postgres:16-alpine
restart: unless-stopped
volumes:
- database:/var/lib/postgresql/data
networks:
- 1panel-network
server:
command: server
container_name: server
depends_on:
postgresql:
condition: service_healthy
env_file:
- .env
environment:
AUTHENTIK_POSTGRESQL__HOST: postgresql
AUTHENTIK_POSTGRESQL__NAME: ${PG_DB:-authentik}
AUTHENTIK_POSTGRESQL__PASSWORD: ${PG_PASS}
AUTHENTIK_POSTGRESQL__USER: ${PG_USER:-authentik}
AUTHENTIK_SECRET_KEY: ${AUTHENTIK_SECRET_KEY:?secret key required}
image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2026.2.1}
ports:
- ${COMPOSE_PORT_HTTP:-9000}:9000
- ${COMPOSE_PORT_HTTPS:-9443}:9443
restart: unless-stopped
shm_size: 512mb
volumes:
- ./data:/data
- ./custom-templates:/templates
networks:
- 1panel-network
worker:
command: worker
container_name: worker
depends_on:
postgresql:
condition: service_healthy
env_file:
- .env
environment:
AUTHENTIK_POSTGRESQL__HOST: postgresql
AUTHENTIK_POSTGRESQL__NAME: ${PG_DB:-authentik}
AUTHENTIK_POSTGRESQL__PASSWORD: ${PG_PASS}
AUTHENTIK_POSTGRESQL__USER: ${PG_USER:-authentik}
AUTHENTIK_SECRET_KEY: ${AUTHENTIK_SECRET_KEY:?secret key required}
image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2026.2.1}
restart: unless-stopped
shm_size: 512mb
user: root
volumes:
- /var/run/docker.sock:/var/run/docker.sock
- ./data:/data
- ./certs:/certs
- ./custom-templates:/templates
networks:
- 1panel-network
volumes:
database:
driver: local
networks:
1panel-network:
external: true
2、创建.env
PG_PASS=Fb9rB2mbQGaBBTdhiwbv7jEWWTgLrXATDvAJlGNJvMzYfWhh
AUTHENTIK_SECRET_KEY=07yYAmqAeV8dX8XV/k1RmM+KgzU3zAPUp0TL8ywI+aq2lf3+
AUTHENTIK_LISTEN__TRUSTED_PROXY_CIDRS="192.168.0.0/16,172.21.0.0/12,0.0.0.0/0"
AUTHENTIK_SERVER__EXTERNAL_HOST="https://auth.198388.xyz"
AUTHENTIK_INSECURE=true
AUTHENTIK_HOST=https://auth.198388.xyz
3、启动容器
docker compose up -d