[Unit]
ConditionPathIsDirectory=/mnt/data/containers/authentik/templates
ConditionPathIsDirectory=/mnt/data/containers/authentik/certs
ConditionPathIsDirectory=/mnt/data/containers/authentik/media
Requires=authentik-db.service
After=authentik-db.service

[Container]
ContainerName=authentik-server
Image=ghcr.io/goauthentik/server:2026.5
AutoUpdate=registry
EnvironmentFile=/mnt/data/containers/authentik/authentik.env
Exec=server
Pod=authentik.pod

Volume=/mnt/data/containers/authentik/templates:/custom-templates:ro
Volume=/mnt/data/containers/authentik/certs:/certs:rw
Volume=/mnt/data/containers/authentik/media:/media:rw

# Custom CSS and layout
# Volume=/mnt/data/containers/authentik/custom/generic-cover-alt.jpg:/web/dist/assets/images/flow_background.jpg:ro

Label=homepage.group=Tech
Label=homepage.name=Authentik
Label=homepage.icon=authentik.png
Label=homepage.href=https://auth.inkletblot.com
Label=homepage.description="Auth Provider"

[Service]
Restart=on-failure
RestartSteps=5
RestartMaxDelaySec=2min
# Extend Timeout to allow time to pull the image
TimeoutStartSec=900

[Install]
WantedBy=default.target