Authentik in Docker (LXC)

Deploy (outline)

• Create privileged LXC (Debian/Ubuntu).
• Install Docker + Compose plugin.
• Use vendor docker-compose.yml (postgres, redis, server, worker).
• Place data on persistent volume (bind to TrueNAS NFS if desired).
• Put behind reverse proxy (Caddy), secure with TLS.

Troubleshooting (real case)

• Worker crash loops traced to PostgreSQL password mismatch between DB and env vars.
• Fix by resetting the password inside Postgres, then updating env/compose and restarting:

  docker compose down
  # reset password in DB, update env
  docker compose up -d