1、创建docker-compose.yml
services:
postgresql:

container_name: postgresql
env_file:
- .env
environment:
  POSTGRES_DB: ${PG_DB:-authentik}
  POSTGRES_PASSWORD: ${PG_PASS:?database password required}
  POSTGRES_USER: ${PG_USER:-authentik}
  POSTGRES_IDLE_IN_TRANSACTION_SESSION_TIMEOUT: "60000"
  POSTGRES_TCP_KEEPALIVES_IDLE: "60"
  POSTGRES_TCP_KEEPALIVES_INTERVAL: "10"
  POSTGRES_TCP_KEEPALIVES_COUNT: "6"
  POSTGRES_MAX_CONNECTIONS: "200"
healthcheck:
  interval: 30s
  retries: 5
  start_period: 20s
  test:
  - CMD-SHELL
  - pg_isready -d $${POSTGRES_DB} -U $${POSTGRES_USER}
  timeout: 5s
image: docker.io/library/postgres:16-alpine
restart: unless-stopped
volumes:
- database:/var/lib/postgresql/data
networks:
- 1panel-network

server:

command: server
container_name: server
depends_on:
  postgresql:
    condition: service_healthy
env_file:
- .env
environment:
  AUTHENTIK_POSTGRESQL__HOST: postgresql
  AUTHENTIK_POSTGRESQL__NAME: ${PG_DB:-authentik}
  AUTHENTIK_POSTGRESQL__PASSWORD: ${PG_PASS}
  AUTHENTIK_POSTGRESQL__USER: ${PG_USER:-authentik}
  AUTHENTIK_SECRET_KEY: ${AUTHENTIK_SECRET_KEY:?secret key required}
image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2026.2.1}
ports:
- ${COMPOSE_PORT_HTTP:-9000}:9000
- ${COMPOSE_PORT_HTTPS:-9443}:9443
restart: unless-stopped
shm_size: 512mb
volumes:
- ./data:/data
- ./custom-templates:/templates
networks:
- 1panel-network

worker:

command: worker
container_name: worker
depends_on:
  postgresql:
    condition: service_healthy
env_file:
- .env
environment:
  AUTHENTIK_POSTGRESQL__HOST: postgresql
  AUTHENTIK_POSTGRESQL__NAME: ${PG_DB:-authentik}
  AUTHENTIK_POSTGRESQL__PASSWORD: ${PG_PASS}
  AUTHENTIK_POSTGRESQL__USER: ${PG_USER:-authentik}
  AUTHENTIK_SECRET_KEY: ${AUTHENTIK_SECRET_KEY:?secret key required}
image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2026.2.1}
restart: unless-stopped
shm_size: 512mb
user: root
volumes:
- /var/run/docker.sock:/var/run/docker.sock
- ./data:/data
- ./certs:/certs
- ./custom-templates:/templates
networks:
- 1panel-network

volumes:
database:

driver: local

networks:
1panel-network:

external: true

2、创建.env
PG_PASS=Fb9rB2mbQGaBBTdhiwbv7jEWWTgLrXATDvAJlGNJvMzYfWhh
AUTHENTIK_SECRET_KEY=07yYAmqAeV8dX8XV/k1RmM+KgzU3zAPUp0TL8ywI+aq2lf3+
AUTHENTIK_LISTEN__TRUSTED_PROXY_CIDRS="192.168.0.0/16,172.21.0.0/12,0.0.0.0/0"
AUTHENTIK_SERVER__EXTERNAL_HOST="https://auth.198388.xyz"
AUTHENTIK_INSECURE=true
AUTHENTIK_HOST=https://auth.198388.xyz
3、启动容器
docker compose up -d