ubuntu/authentik-server repository overview

ubuntu/authentik-server is a rock for authentik-server maintained by Canonical⁠.

Authentik is an open-source Identity Provider focused on flexibility and versatility. This rock bundles the Authentik server (Go), worker (Rust/Python) and all required runtimes. Authentik supports SAML2, LDAP, OAuth2, and OpenID Connect protocols, and can be used as a standalone identity provider or integrated into existing infrastructure.

[Learn more about authentik-server⁠]

⁠Tags and Architectures

NOTE: These tags follow a specific naming convention that respects the concept of channels⁠.

⁠Get started

This rock's entrypoint is Pebble, a container-optimized init process that enables the orchestration of a collection of local service processes as an organized set.

[Learn more about Pebble⁠]

⁠Inspect

To view the Pebble services⁠ and checks⁠ defined in this rock:

docker run --rm ubuntu/authentik-server:2026-22.04_stable plan

⁠Run

To run this rock, use any of the usual container runtimes, for example, docker:

docker run --name authentik-server-container \
    -p 9000:9000 -p 9443:9443 \
    ubuntu/authentik-server:2026-22.04_stable

Access the Authentik Server at http://localhost:9000 or https://localhost:9443.

⁠Get logs

To view the logs of the running container, run:

docker exec authentik-server-container pebble logs

Or, for a specific service:

docker exec authentik-server-container pebble logs <service>

⁠Monitor health checks

Rocks may have predefined health checks that you can list by running:

docker exec authentik-server-container pebble checks

The overall health of your container can be inspected via:

docker exec authentik-server-container pebble health

⁠Configuration

⁠Environment variables

⁠Ports

[Report a bug⁠] [Contribute⁠]

Canonical is the provider of this container image. It is the user's responsibility to ensure that any use of this image complies with any relevant licenses for all software contained within, as well as with Canonical’s IP Policy⁠.