[Unit]
ConditionPathIsDirectory=/mnt/data/containers/authentik/templates
ConditionPathIsDirectory=/mnt/data/containers/authentik/certs
ConditionPathIsDirectory=/mnt/data/containers/authentik/media

[Container]
ContainerName=authentik-worker
Image=ghcr.io/goauthentik/server:2026.5
AutoUpdate=registry
EnvironmentFile=/mnt/data/containers/authentik/authentik.env
EnvironmentFile=/mnt/data/containers/authentik/authentik-worker.env
Exec=worker
Pod=authentik.pod

Volume=/mnt/data/containers/authentik/templates:/custom-templates:ro
Volume=/mnt/data/containers/authentik/certs:/certs:rw
Volume=/mnt/data/containers/authentik/media:/media:rw

[Service]
Restart=on-failure
RestartSteps=5
RestartMaxDelaySec=2min
# Extend Timeout to allow time to pull the image
TimeoutStartSec=900

[Install]
WantedBy=default.target