From 9095db8607c529b2d2d3ebeef82226bc44337967 Mon Sep 17 00:00:00 2001
From: Nico Pergande <72522450+Nico-Pergande@users.noreply.github.com>
Date: Sun, 26 Apr 2026 19:03:40 +0200
Subject: [PATCH 1/2] feat(authentik): bump to 2026.2.2 and Postgres 18

Updates the Authentik blueprint from 2025.6.3 to the latest stable
2026.2.2, and bumps Postgres from 16-alpine to 18-alpine. Redis is
intentionally retained.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 blueprints/authentik/docker-compose.yml | 6 +++---
 blueprints/authentik/template.toml      | 2 +-
 meta.json                               | 2 +-
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/blueprints/authentik/docker-compose.yml b/blueprints/authentik/docker-compose.yml
index b12b6585..95703909 100644
--- a/blueprints/authentik/docker-compose.yml
+++ b/blueprints/authentik/docker-compose.yml
@@ -1,7 +1,7 @@
 version: "3.8"
 services:
   postgresql:
-    image: docker.io/library/postgres:16-alpine
+    image: docker.io/library/postgres:18-alpine
     restart: unless-stopped
     healthcheck:
       test: ["CMD-SHELL", "pg_isready -d $${POSTGRES_DB} -U $${POSTGRES_USER}"]
@@ -34,7 +34,7 @@ services:
       - 6379
 
   server:
-    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2025.6.3}
+    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2026.2.2}
     restart: unless-stopped
     command: server
     environment:
@@ -57,7 +57,7 @@ services:
         condition: service_healthy
 
   worker:
-    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2025.6.3}
+    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2026.2.2}
     restart: unless-stopped
     command: worker
     environment:
diff --git a/blueprints/authentik/template.toml b/blueprints/authentik/template.toml
index 71a504b3..117836c6 100644
--- a/blueprints/authentik/template.toml
+++ b/blueprints/authentik/template.toml
@@ -23,4 +23,4 @@ PG_DB = "${pg_db}"
 PG_PASS = "${password:32}" # Password for PostgreSQL authentication
 AUTHENTIK_SECRET_KEY = "${password:64}" # Secret key for Authentik authentication
 AUTHENTIK_IMAGE = "ghcr.io/goauthentik/server"
-AUTHENTIK_TAG = "2025.6.3"
\ No newline at end of file
+AUTHENTIK_TAG = "2026.2.2"
\ No newline at end of file
diff --git a/meta.json b/meta.json
index 3ae0cb5e..a6610b6e 100644
--- a/meta.json
+++ b/meta.json
@@ -472,7 +472,7 @@
   {
     "id": "authentik",
     "name": "Authentik",
-    "version": "2025.6.3",
+    "version": "2026.2.2",
     "description": "Authentik is an open-source Identity Provider for authentication and authorization. It provides a comprehensive solution for managing user authentication, authorization, and identity federation with support for SAML, OAuth2, OIDC, and more.",
     "links": {
       "github": "https://github.com/goauthentik/authentik",

From 288dfdce4504c640b9762d6175df6b945e254f37 Mon Sep 17 00:00:00 2001
From: Mauricio Siu <siumauricio@icloud.com>
Date: Wed, 8 Jul 2026 02:11:39 -0600
Subject: [PATCH 2/2] fix: mount postgres volume at new PGDATA path for
 postgres:18

The official postgres:18 image moved PGDATA from /var/lib/postgresql/data
to /var/lib/postgresql. Mounting the volume at the old path made the
entrypoint abort and the postgresql container restart-loop, failing the
deploy with "dependency postgresql failed to start". Mounting the volume
at /var/lib/postgresql fixes the deploy; server responds 200 on
/if/flow/initial-setup/.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
---
 blueprints/authentik/docker-compose.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/blueprints/authentik/docker-compose.yml b/blueprints/authentik/docker-compose.yml
index 95703909..e0c3c252 100644
--- a/blueprints/authentik/docker-compose.yml
+++ b/blueprints/authentik/docker-compose.yml
@@ -10,7 +10,7 @@ services:
       retries: 5
       timeout: 5s
     volumes:
-      - database:/var/lib/postgresql/data
+      - database:/var/lib/postgresql
     environment:
       POSTGRES_PASSWORD: ${PG_PASS}
       POSTGRES_USER: ${PG_USER}