From e0af750bb33b285b6c2e0f54660e752dbab8a4ef Mon Sep 17 00:00:00 2001
From: phg <mail@philip-henning.com>
Date: Thu, 28 Aug 2025 22:52:21 +0200
Subject: [PATCH] Update docker-compose and environment configuration for
 authentik proxy

---
 docker-compose.yml | 35 +++++++++++++++++++++--------------
 template.env       |  3 ++-
 2 files changed, 23 insertions(+), 15 deletions(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index 7d8b8c2..0827ff9 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -1,15 +1,22 @@
 services:
-    authentik_proxy:
-        image: ghcr.io/goauthentik/proxy:${AUTHENTIK_TAG:?Authentik tag is not configured}
-        # Optionally specify the container's network, which must be able to reach the core authentik server.
-        # networks:
-        #   - foo
-        ports:
-            - 127.0.0.1:42080:42080
-            - 127.0.0.1:42443:42443
-        environment:
-            AUTHENTIK_HOST: ${AUTHENTIK_HOST:?Authentik host is not configured}
-            AUTHENTIK_INSECURE: "false"
-            AUTHENTIK_LISTEN__HTTP: "0.0.0.0:42080"
-            AUTHENTIK_LISTEN__HTTPS: "0.0.0.0:42443"
-            AUTHENTIK_TOKEN: ${AUTHENTIK_TOKEN:?Authentik token is not configured}
\ No newline at end of file
+  authentik_proxy:
+    image: ghcr.io/goauthentik/proxy:${AUTHENTIK_TAG:?Authentik tag is not configured}
+    # Optionally specify the container's network, which must be able to reach the core authentik server.
+    # networks:
+    #   - foo
+    ports:
+      - 127.0.0.1:42080:42080
+      - 127.0.0.1:42443:42443
+    networks:
+      - dokploy-network
+    environment:
+      AUTHENTIK_HOST: ${AUTHENTIK_HOST:?Authentik host is not configured}
+      AUTHENTIK_INSECURE: "true"
+      AUTHENTIK_LISTEN__HTTP: "0.0.0.0:42080"
+      AUTHENTIK_LISTEN__HTTPS: "0.0.0.0:42443"
+      AUTHENTIK_TOKEN: ${AUTHENTIK_TOKEN:?Authentik token is not configured}
+      AUTHENTIK_HOST_BROWSER: ${AUTHENTIK_HOST_BROWSER:?Authentik host browser is not configured}
+
+networks:
+  dokploy-network:
+    external: true
\ No newline at end of file
diff --git a/template.env b/template.env
index 3054730..911de7b 100644
--- a/template.env
+++ b/template.env
@@ -1,5 +1,6 @@
 AUTHENTIK_TAG=2025.8.1
-AUTHENTIK_HOST=https://sso.s1q.dev
+AUTHENTIK_HOST=https://127.0.0.1:9443
+AUTHENTIK_HOST_BROWSER=https://sso.s1q.dev
 
 # Secrets
 # AUTHENTIK_TOKEN=  # Token generated by authentik