---
type: reference
description: "The Authentik worker — background tasks: event processing, provider"
tags:
  - infrastructure
  - authentik
timestamp: 2026-09-16
---

# authentik-worker

The Authentik worker — background tasks: event processing, provider
synchronization, scheduled flows, and certificate renewal. It runs the same
image as the server; the `command: worker` selects the role.

- **Unit:** `dankclaw/authentik/quadlet/authentik-worker.container` (`authentik-worker.service`)
- **Image:** `ghcr.io/goauthentik/server:2026.8.3` (command: `worker`)
- **Runs as:** `0:0` (rootless: container root maps to the host user that owns the data dir)
- **Data:** `/home/dank/authentik/data` (bind mount, shared with the server)
- **No port** — the worker has no HTTP endpoint.

See [Authentik.md](Authentik.md) for the full architecture, setup, and failure
modes.