Sanitized single-commit public mirror of recipe-maintainer. - Removed test-ssh/.testenv (live creds); added test-ssh/.testenv.example placeholders. - Removed plans/ and planned-updates/ (deployment-planning docs) so no client/ deployment domains appear in the public repo. - All other secret stores were already gitignored. - docs.coopcloud.tech retained as a submodule (public upstream).
846 B
846 B
Authentik — First-Time Setup
Prerequisites
- DNS:
authentik.<domain_suffix>must resolve to the server
Steps
-
Create the app:
abra app new authentik --server <SERVER> --domain authentik.<DOMAIN_SUFFIX> --no-input -
Generate secrets:
abra app secret generate authentik.<DOMAIN_SUFFIX> --all -m --no-inputSave output to
recipe-info/testsecrets/authentik.<DOMAIN_SUFFIX>. -
Deploy:
abra app deploy authentik.<DOMAIN_SUFFIX> --chaos --force --no-input -
Verify: curl
https://authentik.<DOMAIN_SUFFIX>returns HTTP 200.
Notes
- Admin credentials: username
akadmin, password fromadmin_passsecret in testsecrets. - The bootstrap token (
AK_TOKEN) is thebootstrap_tokensecret — needed by SSO setup scripts for other recipes.