The authentication glue you need.

Go to file

Moritz e7eeb3d112 continuous-integration/drone/push Build is failing Details prevent username change		17 hours ago
release	prevent username change	17 hours ago
.drone.yml	Switch to self-hosted stack-ssh-deploy image [mass update]	2 months ago
.env.sample	prevent username change	17 hours ago
.gitignore	…
README.md	Authentik update resillience: overwrite default blueprints	7 days ago
abra.sh	nextcloud sso blueprint	7 days ago
compose.nextcloud.yml	nextcloud sso blueprint	7 days ago
compose.yml	chore: publish 3.0.0+2023.2.3 release	7 days ago
custom.css.tmpl	…
custom_flows.yaml.tmpl	fix: set default values for missing env variables	3 weeks ago
flow_authentication.yaml.tmpl	Authentik update resillience: overwrite default blueprints	7 days ago
flow_invalidation.yaml.tmpl	Authentik update resillience: overwrite default blueprints	7 days ago
flow_invitation.yaml.tmpl	Authentik update resillience: overwrite default blueprints	7 days ago
flow_recovery.yaml.tmpl	Authentik update resillience: overwrite default blueprints	7 days ago
flow_translation.yaml.tmpl	Authentik update resillience: overwrite default blueprints	7 days ago
nextcloud.yaml.tmpl	nextcloud sso blueprint	7 days ago
system_tenant.yaml.tmpl	Authentik update resillience: overwrite default blueprints	7 days ago

README.md

authentik

authentik is an open-source Identity Provider focused on flexibility and versatility

List of all possible environment variables

Category: Apps
Status: 0, work-in-progress
Image: ghcr/goauthentik/server, 4, upstream
Healthcheck: Yes
Backups: Yes
Email: Yes
Tests: No
SSO: Yes

Quick start

abra app new authentik
abra app config <app-name>
abra app secret insert <app_name> email_pass v1 <password>
abra app secret generate -a <app_name>
abra app deploy <app-name>
abra app cmd <app_name> app set_admin_pass
abra app cmd <app_name> worker apply_blueprints

Rotate Secrets

Increment the secret versions using abra app config <app_name>

abra app secret generate -a <app_name>
abra app undeploy <app_name>
abra app deploy <app_name>
abra app cmd <app_name> db rotate_db_pass
abra app cmd <app_name> app set_admin_pass

Customization

Place the files you want to overwrite in a directory <assets_path>. Run abra app config <app_name> and define the env variable COPY_ASSETS in the following format:

"<source_file1>|<service>:<target_directory1> <source_file2>|<service>:<target_directory2> ...

For example:

COPY_ASSETS="flow_background.jpg|app:/web/dist/assets/images/"
COPY_ASSETS="$COPY_ASSETS icon_left_brand.svg|app:/web/dist/assets/icons/
COPY_ASSETS="$COPY_ASSETS icon.png|app:/web/dist/assets/icons/"

Run this command after every deploy/upgrade:

abra app command --local <app-name> customize <assets_path>

Blueprints

Blueprint Dependency Requirements:

Recovery with email verification
- Default - Password change flow
- Default - Authentication flow
Custom Authentication Flow
- Default - Authentication flow
- Recovery with email verification
Invitation Enrollment Flow
- Default - User settings flow
- Default - Authentication flow
- Default - Source enrollment flow
Custom Invalidation Flow
- Default - Invalidation flow
Flow Translations
- Recovery with email verification
- Default - Password change flow
- Default - User settings flow
- Default - Source enrollment flow
Custom System Tenant
- Default - Tenant
- Recovery with email verification

Blueprint Dependency Graph:

Custom System Tenant
- Default - Tenant
1. Invitation Enrollment Flow 3. Flow Translations - Default - User settings flow - Default - Source enrollment flow 2. Custom Authentication Flow 1. Recovery with email verification - Default - Authentication flow - Default - Password change flow
Custom Invalidation Flow
- Default - Invalidation flow

For more, see docs.coopcloud.tech.