authentik-proxy (13)

Published 2025-07-25 13:00:58 +02:00 by tom

Installation

docker pull git.ar21.de/tom/authentik-proxy:13
sha256:be4fa0ba1f75a70a97003ba06f7b53d7ea2d158639294cd6a23e2354972370a3

About this package

goauthentik.io Proxy outpost image, see https://goauthentik.io for more info.

Image layers

# debian.sh --arch 'amd64' out/ 'bookworm' '@1753056000'
ARG OPENSSL_VERSION=3.1.2
ARG OPENSSL_VERSION_SUFFIX=ak-fips
ENV build_root=/build
COPY /build/output /build/fake-deb # buildkit
RUN |2 OPENSSL_VERSION=3.1.2 OPENSSL_VERSION_SUFFIX=ak-fips /bin/sh -c mkdir -p $build_root && apt-get update && apt-get install -y --no-install-recommends build-essential wget ca-certificates && cd ${build_root} && wget https://www.openssl.org/source/openssl-${OPENSSL_VERSION}.tar.gz -O openssl.tgz && tar xvf openssl.tgz && apt-get remove --purge -y wget openssl && cd $build_root/openssl-${OPENSSL_VERSION} && sed -i "s:BUILD_METADATA=:BUILD_METADATA=${OPENSSL_VERSION_SUFFIX}:" VERSION.dat && ./config fips $cryptography_ssl_options && make depend && make -j$(nproc) && make install_sw install_ssldirs install_fips && (cp -r /usr/local/lib64/* /usr/local/lib/ || true) && openssl fipsinstall -out /usr/local/ssl/fipsmodule.cnf -module $(find /usr/local/lib -name fips.so) && sed -i "s:# .include fipsmodule.cnf:.include /usr/local/ssl/fipsmodule.cnf:" /usr/local/ssl/openssl.cnf && sed -i 's:# fips = fips_sect:fips = fips_sect:' /usr/local/ssl/openssl.cnf && sed -i 's:# \[provider_sect\]:\[provider_sect\]:' /usr/local/ssl/openssl.cnf && apt-get remove --purge -y build-essential && apt-get autoremove --purge -y && rm -rf /var/lib/apt/lists/* && dpkg -i ${build_root}/fake-deb/*deb && apt-mark hold libssl-dev libssl3 openssl && rm -rf ${build_root} && ln -s /usr/local/bin/openssl /usr/bin/openssl && sed -i 's:# activate = 1:activate = 1:' /usr/local/ssl/openssl.cnf && echo "\n[algorithm_sect]\ndefault_properties = fips=yes" >> /usr/local/ssl/openssl.cnf # buildkit
RUN |2 OPENSSL_VERSION=3.1.2 OPENSSL_VERSION_SUFFIX=ak-fips /bin/sh -c apt-get update && apt-get upgrade -y && apt-get install -y --no-install-recommends ca-certificates wget && apt-get clean && rm -rf /var/lib/apt/lists/* # buildkit
ENV SSL_CERT_DIR=/etc/ssl/certs
ARG VERSION
ARG GIT_BUILD_HASH
ENV GIT_BUILD_HASH=
LABEL org.opencontainers.image.url=https://goauthentik.io
LABEL org.opencontainers.image.description=goauthentik.io Proxy outpost image, see https://goauthentik.io for more info.
LABEL org.opencontainers.image.source=https://github.com/goauthentik/authentik
LABEL org.opencontainers.image.version=
LABEL org.opencontainers.image.revision=
RUN |2 VERSION= GIT_BUILD_HASH= /bin/sh -c apt-get update && apt-get upgrade -y && apt-get clean && rm -rf /tmp/* /var/lib/apt/lists/* # buildkit
COPY /go/proxy / # buildkit
COPY /static/robots.txt /web/robots.txt # buildkit
COPY /static/security.txt /web/security.txt # buildkit
COPY /static/dist/ /web/dist/ # buildkit
COPY /static/authentik/ /web/authentik/ # buildkit
HEALTHCHECK &{["CMD" "/proxy" "healthcheck"] "5s" "0s" "3s" "0s" '\x14'}
EXPOSE map[9000/tcp:{} 9300/tcp:{} 9443/tcp:{}]
USER 1000
ENV TMPDIR=/dev/shm/ GOFIPS=1
ENTRYPOINT ["/proxy"]

Labels

Key Value
org.opencontainers.image.description goauthentik.io Proxy outpost image, see https://goauthentik.io for more info.
org.opencontainers.image.revision
org.opencontainers.image.source https://github.com/goauthentik/authentik
org.opencontainers.image.url https://goauthentik.io
org.opencontainers.image.version
Details
Container
2025-07-25 13:00:58 +02:00
321
OCI / Docker
linux/amd64
72 MiB
Versions (5) View all
13 2025-07-25
12 2025-07-24
11 2025-07-24
10 2025-07-22
9 2025-07-22