Authentik

Authentik is an Identity and Access Managment application.

The Authentik app announcement

* LDAP Authentication

Authentik is a community application from the GeniusDynamics repository. Documentation and source can be found on Github. Please see the excerpt from the readme below.

README.md

[![License: GPL v3](https://img.shields.io/badge/License-GPLv3-blue.svg)](https://www.gnu.org/licenses/gpl-3.0)
[![Authentik Version](https://img.shields.io/badge/Authentik-2025.8.0-blue)](https://goauthentik.io/)
 
A comprehensive NethServer 8 module that integrates **Authentik**, the open-source Identity Provider, into your NethServer infrastructure. Authentik provides centralized authentication, authorization, and user management with support for OAuth2, SAML, LDAP, and many other protocols.
 
## ✨ Features
 
- **Centralized Identity Management**: Single sign-on (SSO) across all your applications
- **Multi-Protocol Support**: OAuth2, OpenID Connect, SAML, LDAP, SCIM, and more
- **User-Friendly Interface**: Modern Vue.js-based management interface
- **Enterprise-Ready**: Built for production environments with high availability
- **Extensible**: Support for custom flows, policies, and integrations
- **Secure**: Built-in security features including MFA, password policies, and audit logging
 
## 🚀 Quick Start
 
### Prerequisites
 
- NethServer 8 installed and running
- Administrative access to the NethServer cluster
- A domain name for the Authentik instance
 
### Installation
 
1. **Add the module to your NethServer cluster:**
 
   ```bash
   add-module ghcr.io/geniusdynamics/goauthentik:latest 1
   ```
 
   The command will return output similar to:
   ```json
   {"module_id": "goauthentik1", "image_name": "goauthentik", "image_url": "ghcr.io/geniusdynamics/goauthentik:latest"}
   ```
 
2. **Configure the module:**
 
   ```bash
   api-cli run configure-module --agent module/goauthentik1 --data - <<EOF
   {
     "host": "auth.yourdomain.com",
     "http2https": true,
     "lets_encrypt": true
   }
   EOF
   ```
 
3. **Complete the initial setup:**
 
   - Open your browser and navigate to `https://auth.yourdomain.com/if/flow/initial-setup/`
   - Follow the on-screen instructions to complete the Authentik setup
   - Configure your first authentication flow and create administrative users
 
## ⚙️ Configuration
 
### Configuration Parameters
 
| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| `host` | string | Yes | Fully qualified domain name for the Authentik instance |
| `http2https` | boolean | Yes | Enable HTTP to HTTPS redirection |
| `lets_encrypt` | boolean | Yes | Enable Let's Encrypt SSL certificate |
 
### Example Configuration