[Unit]
ConditionPathIsDirectory=/mnt/data/containers/authentik
Requires=authentik.service
After=authentik.service

[Container]
ContainerName=authentik-rac
Image=ghcr.io/goauthentik/rac:2026.5
AutoUpdate=registry
EnvironmentFile=/mnt/data/containers/authentik/authentik-rac.env
Pod=authentik.pod

Volume=/mnt/data/containers/authentik/custom/rac-fonts:/usr/share/fonts/additional:ro

Label=homepage.group=Tech
Label=homepage.name="Authentik RAC"
Label=homepage.icon=authentik.png
Label=homepage.href=https://auth.inkletblot.com
Label=homepage.description="Remote Access Provider"

[Service]
# Extend Timeout to allow time to pull the image
TimeoutStartSec=900

[Install]
WantedBy=default.target