From 9605b9d3bda58168232c0b11822f294ae8c2ca00 Mon Sep 17 00:00:00 2001
From: Ryan Blundon <ryan.blundon@protonmail.com>
Date: Sun, 8 Mar 2026 16:23:11 -0500
Subject: [PATCH] Added authentic boilerplate

---
 boilerplates/authentik/.env         |  3 ++
 boilerplates/authentik/compose.yaml | 80 +++++++++++++++++++++++++++++
 boilerplates/traefik/.env           |  1 +
 3 files changed, 84 insertions(+)
 create mode 100644 boilerplates/authentik/.env
 create mode 100644 boilerplates/authentik/compose.yaml
 create mode 100644 boilerplates/traefik/.env

diff --git a/boilerplates/authentik/.env b/boilerplates/authentik/.env
new file mode 100644
index 0000000..655b300
--- /dev/null
+++ b/boilerplates/authentik/.env
@@ -0,0 +1,3 @@
+AUTHENTIK_SECRET_KEY=xhnxhfcKhaVHpB7jOLztTRk9dFxKqHrU
+DATABASE_PASSWORD=D8Ou4Sd7TgvfU4BErUSM2J0AGVuoPPCF
+AUTHENTIK_ADMIN_PASSWORD=WeypDZ95MITHnZePYv3FDY3YibTJlsXD
diff --git a/boilerplates/authentik/compose.yaml b/boilerplates/authentik/compose.yaml
new file mode 100644
index 0000000..aeb5cf0
--- /dev/null
+++ b/boilerplates/authentik/compose.yaml
@@ -0,0 +1,80 @@
+---
+services:
+  authentik:
+    image: ghcr.io/goauthentik/server:2025.12.4
+    restart: unless-stopped
+    command: server
+    environment:
+      - AUTHENTIK_SECRET_KEY=${AUTHENTIK_SECRET_KEY}
+      - AUTHENTIK_ERROR_REPORTING__ENABLED=False
+      - AUTHENTIK_POSTGRESQL__HOST=authentik_postgres
+      - AUTHENTIK_POSTGRESQL__USER=authentik
+      - AUTHENTIK_POSTGRESQL__NAME=authentik
+      - AUTHENTIK_POSTGRESQL__PASSWORD=${DATABASE_PASSWORD}
+    networks:
+      - authentik_backend
+    ports:
+      - "8000:9000"
+      - "8443:9443"
+    volumes:
+      - authentik_data:/data
+      - authentik_templates:/templates
+    depends_on:
+      - authentik_postgres
+
+  authentik_worker:
+    image: ghcr.io/goauthentik/server:2025.12.4
+    restart: unless-stopped
+    command: worker
+    environment:
+      - AUTHENTIK_SECRET_KEY=${AUTHENTIK_SECRET_KEY}
+      - AUTHENTIK_ERROR_REPORTING__ENABLED=False
+      - AUTHENTIK_POSTGRESQL__HOST=authentik_postgres
+      - AUTHENTIK_POSTGRESQL__USER=authentik
+      - AUTHENTIK_POSTGRESQL__NAME=authentik
+      - AUTHENTIK_POSTGRESQL__PASSWORD=${DATABASE_PASSWORD}
+      - AUTHENTIK_BOOTSTRAP_PASSWORD=${AUTHENTIK_ADMIN_PASSWORD}
+    user: root
+    networks:
+      - authentik_backend
+    volumes:
+      - /run/docker.sock:/run/docker.sock
+      - authentik_data:/data
+      - authentik_certs:/certs
+      - authentik_templates:/templates
+    depends_on:
+      - authentik_postgres
+
+  authentik_postgres:
+    image: docker.io/library/postgres:17.8
+    restart: unless-stopped
+    environment:
+      - POSTGRES_USER=authentik
+      - POSTGRES_PASSWORD=${DATABASE_PASSWORD}
+      - POSTGRES_DB=authentik
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U authentik"]
+      start_period: 30s
+      interval: 10s
+      timeout: 10s
+      retries: 5
+    networks:
+      - authentik_backend
+    volumes:
+      - authentik_postgres:/var/lib/postgresql/data
+
+networks:
+  authentik_backend:
+    driver: bridge
+
+volumes:
+  authentik_postgres:
+    driver: local
+  authentik_redis:
+    driver: local
+  authentik_data:
+    driver: local
+  authentik_certs:
+    driver: local
+  authentik_templates:
+    driver: local
diff --git a/boilerplates/traefik/.env b/boilerplates/traefik/.env
new file mode 100644
index 0000000..323a215
--- /dev/null
+++ b/boilerplates/traefik/.env
@@ -0,0 +1 @@
+CF_DNS_API_TOKEN=CF_DNS_API_TOKENCF_DNS_API_TOKENCC