# Authentik — Ubuntu server (.env for docker-compose.authentik.yml)

# Docker host public IP (no trailing slash)
AUTHENTIK_HOST=http://172.237.44.156:9000

# Host ports
COMPOSE_PORT_HTTP=9000
COMPOSE_PORT_HTTPS=9443

# Database
PG_DB=authentik
PG_USER=authentik
PG_PASS=CHANGE_ME_run_openssl_rand_base64_36

# Required secret (generate once)
AUTHENTIK_SECRET_KEY=CHANGE_ME_run_openssl_rand_base64_60

# Optional image pin
# AUTHENTIK_IMAGE=ghcr.io/goauthentik/server
# AUTHENTIK_TAG=2026.2.3