- Migrate all 127 non-reserved docs to OKF v0.1 frontmatter (type/description/tags/timestamp); fix 13 YAML issues, 2 duplicate-FM blocks, strip reserved-page FM - Restructure log.md to OKF (## YYYY-MM-DD, newest-first) - Fact-check against scripts/AGENTS.md ground truth: fix 6 false 'Active' banners on retired runbooks, 96->114 GiB GTT, deployment.md vs deploy-plan.py/deploy-remote.sh, Deployment Flow frank-medium=Quadlet, Calibre 9.9.0->9.15.0 + CVE-2025-7404 conflation, Copyparty v1.20.24, RomM 5.3.0 breaking change - Move *arr docs to new FrankBook-Pro/ section (git mv, link-safe) - Write active runbook bodies from ground truth (frank-large, frank-small) - Add 3 research briefs + HTML report: Local TTS and Voice Cloning, AI Job Search and Resume Tools, Most Popular Self-Hosted AI Apps (Jun-Sep 2026) - Add upstream-version rows to ComfyUI/OpenWebUI/Hermes app docs - All 336 tests pass; 136 pages, 0 unresolved wikilinks
25 lines
937 B
Markdown
25 lines
937 B
Markdown
---
|
|
type: reference
|
|
description: "The Authentik server — the core, the admin API, and the embedded Caddy outpost."
|
|
tags:
|
|
- infrastructure
|
|
- authentik
|
|
timestamp: 2026-09-16
|
|
---
|
|
|
|
# authentik-server
|
|
|
|
The Authentik server — the core, the admin API, and the embedded Caddy outpost.
|
|
This is the service the Caddy `forward_auth` vhosts proxy to
|
|
(`authentik-server:9000`). It also serves the login page at
|
|
`https://auth.franksdank.cloud`.
|
|
|
|
- **Unit:** `dankclaw/authentik/quadlet/authentik-server.container` (`authentik-server.service`)
|
|
- **Image:** `ghcr.io/goauthentik/server:2026.8.0` (command: `server`)
|
|
- **Port:** `9000` (published; the outpost + admin + login all live here)
|
|
- **Data:** `/home/dank/authentik/data` (bind mount, shared with the worker)
|
|
- **Health:** `http://localhost:9000/-/health/`
|
|
|
|
See [Authentik.md](Authentik.md) for the full architecture, the Caddy
|
|
forward_auth pattern, first-time setup, and failure modes.
|