From 91b87ea091869fff9ca027640e0fa028c1fc8bed Mon Sep 17 00:00:00 2001
From: Yann Verry <yann@verry.org>
Date: Sat, 6 Jul 2024 21:47:27 +0200
Subject: [PATCH] add authentik

---
 peach/docker-compose.yml | 67 ++++++++++++++++------------------------
 1 file changed, 27 insertions(+), 40 deletions(-)

diff --git a/peach/docker-compose.yml b/peach/docker-compose.yml
index 21484b3..a0127b4 100644
--- a/peach/docker-compose.yml
+++ b/peach/docker-compose.yml
@@ -20,15 +20,6 @@ networks:
                   gateway: 2a01:e0a:5b7:35f1::1
 
 services:
-    openldap:
-        image: openldap-alpine
-        volumes:
-            - /srv/docker/volume/openldap/config/openldap:/etc/openldap
-            - /srv/docker/volume/openldap/mdb:/var/lib/openldap/openldap-data
-            - ssl:/ssl
-        ports:
-            - 389:389
-        restart: always
     postgres:
         image: postgres:15-alpine
         volumes:
@@ -41,16 +32,6 @@ services:
             default:
                 ipv6_address: 2a01:e0a:5b7:35f1::5432
         restart: always
-    vault:
-        image: hashicorp/vault
-        volumes:
-            - /srv/docker/volume/vault:/vault
-        restart: always
-        mem_limit: 128M
-        dns: 192.168.3.2
-        cap_add:
-          - IPC_LOCK
-        command: vault server -config /vault/config
     caddy:
         image: caddy-alpine
         volumes:
@@ -68,6 +49,7 @@ services:
         networks:
             default:
                 ipv6_address: 2a01:e0a:5b7:35f1::443
+                ipv4_address: 172.20.0.250
     redis:
         image: redis:alpine
         restart: always
@@ -156,6 +138,7 @@ services:
             - "click.vpn6:fd00::42:6"
             - "quizz.vpn6:fd00::42:8"
             - "kiwi.verry.org:2a01:e0a:5b7:35f3::6"
+            - "banana.verry.org:2a01:e0a:5b7:35f3::11"
             - "backup-01.dinoutoo.vpn:192.168.42.9"
             - "home.verry.org:2a01:e0a:5b7:35f1::443"
             - "mail.verry.org:192.168.3.5"
@@ -262,22 +245,6 @@ services:
         restart: always
         environment:
             - WHOAMI_NAME=iamverry
-    linkding:
-        image: sissbruecker/linkding:latest
-        volumes:
-            - /srv/docker/volume/linkding:/etc/linkding/data
-        restart: always
-        mem_limit: 1G
-        env_file: env/linkding
-        command: uwsgi --http [::]:9090 uwsgi.ini
-    drone:
-        image: drone/drone:2
-        restart: always
-        env_file: env/drone
-    drone-runner-ssh:
-        image: drone/drone-runner-ssh
-        restart: always
-        env_file: env/drone-runner-ssh
 #    minio:
 #        image: minio/minio
 #        volumes:
@@ -313,6 +280,31 @@ services:
         restart: always
         mem_limit: 1G
         cpus: 1
+    authentik-server:
+        image: ghcr.io/goauthentik/server:2024.6.0
+        restart: unless-stopped
+        command: server
+        volumes:
+            - /srv/docker/volume/authentik/media:/media
+            - /srv/docker/volume/authentik/custom-templates:/templates
+        env_file:
+           - env/authentik-server
+        depends_on:
+            - postgres
+            - redis
+    authentik-worker:
+        image: ghcr.io/goauthentik/server:2024.6.0
+        restart: unless-stopped
+        command: worker
+        volumes:
+            - /srv/docker/volume/authentik/media:/media
+            - /srv/docker/volume/authentik/certs:/certs
+            - /srv/docker/volume/authentik/custom-templates:/templates
+        env_file:
+            - env/authentik-worker
+        depends_on:
+            - postgres
+            - redis
     uptime-kuma:
         image: louislam/uptime-kuma
         volumes:
@@ -320,11 +312,6 @@ services:
         restart: always
         mem_limit: 2G
         cpus: 1
-    openspeedtest:
-        environment:
-          - ENABLE_LETSENCRYPT=False
-          - DOMAIN_NAME=speedtest.verry.org
-        image: "openspeedtest/latest"
     geoipupdate:
         image: "maxmindinc/geoipupdate:latest"
         volumes: