Update README.md
This commit is contained in:
parent
4a8678f2b2
commit
0908303489
1 changed files with 165 additions and 1 deletions
166
README.md
166
README.md
|
@ -1,2 +1,166 @@
|
|||
# authentik_ngx_cloudpanel
|
||||
# Authentik Installation Script for CloudPanel Ubuntu 24.04 server ONLY
|
||||
|
||||
This repository contains an automated installation script for deploying Authentik Identity Provider alongside CloudPanel. The script handles Docker installation, service configuration, and initial setup, making it easy to get a production-ready Authentik instance up and running.
|
||||
|
||||
[](https://opensource.org/licenses/MIT)
|
||||
|
||||
## Features
|
||||
|
||||
- 🔧 Automated Docker installation and configuration
|
||||
- 🚀 One-command Authentik deployment
|
||||
- 🔒 Automatic secure credential generation
|
||||
- 🛡️ Built-in health checks and verification
|
||||
- 🔄 Service recovery and redeployment capabilities
|
||||
- 📝 Detailed logging
|
||||
- 🌐 CloudPanel integration support
|
||||
|
||||
## Prerequisites
|
||||
|
||||
- Ubuntu 24.04 server ONLY
|
||||
- Root/sudo access
|
||||
- CloudPanel installed (optional, for reverse proxy setup)
|
||||
- Port 9000 and 9443 available
|
||||
|
||||
## Quick Start
|
||||
|
||||
1. Download the installation script:
|
||||
```bash
|
||||
wget -O authentik-install.sh wget https://git.hhf.technology/hhf/authentik_ngx_cloudpanel/raw/branch/main/authentik-install.sh
|
||||
```
|
||||
|
||||
2. Make the script executable:
|
||||
```bash
|
||||
chmod +x authentik-install.sh
|
||||
```
|
||||
|
||||
3. Run the installation:
|
||||
```bash
|
||||
sudo ./authentik-install.sh
|
||||
```
|
||||
|
||||
## What the Script Does
|
||||
|
||||
- Checks and installs Docker if necessary
|
||||
- Sets up required directories and configurations
|
||||
- Generates secure random passwords and tokens
|
||||
- Deploys PostgreSQL, Redis, and Authentik services
|
||||
- Configures initial admin account
|
||||
- Verifies successful installation
|
||||
- Provides detailed setup information
|
||||
|
||||
## Configuration
|
||||
|
||||
The script uses the following default configuration:
|
||||
|
||||
- Installation Directory: `/docker/authentik`
|
||||
- PostgreSQL Database: `authentik`
|
||||
- Web Interface Port: `9000`
|
||||
- HTTPS Port: `9443`
|
||||
|
||||
To customize the admin email before installation, edit the script:
|
||||
```bash
|
||||
ADMIN_EMAIL="your-email@example.com"
|
||||
```
|
||||
|
||||
## Directory Structure
|
||||
|
||||
```
|
||||
/docker/authentik/
|
||||
├── docker-compose.yml
|
||||
├── media/
|
||||
├── certs/
|
||||
└── custom-templates/
|
||||
```
|
||||
|
||||
## Logging
|
||||
|
||||
The script maintains detailed logs at:
|
||||
```
|
||||
/var/log/authentik-install.log
|
||||
```
|
||||
|
||||
## CloudPanel Integration
|
||||
|
||||
After installation, you can set up a reverse proxy in CloudPanel:
|
||||
|
||||
1. Create a new site
|
||||
2. Choose "Reverse Proxy" type
|
||||
3. Point to `http://localhost:9000`
|
||||
4. Set up SSL certificate
|
||||
|
||||
## Troubleshooting
|
||||
|
||||
### Common Issues
|
||||
|
||||
1. **Services not starting:**
|
||||
```bash
|
||||
cd /docker/authentik
|
||||
docker compose ps
|
||||
docker compose logs
|
||||
```
|
||||
|
||||
2. **Port conflicts:**
|
||||
```bash
|
||||
sudo lsof -i :9000
|
||||
sudo lsof -i :9443
|
||||
```
|
||||
|
||||
3. **Lost credentials:**
|
||||
```bash
|
||||
cd /docker/authentik
|
||||
cat docker-compose.yml
|
||||
```
|
||||
|
||||
### Initial Setup
|
||||
|
||||
Access the setup page at:
|
||||
```
|
||||
http://<your-server-IP>:9000/if/flow/initial-setup/
|
||||
```
|
||||
|
||||
## Maintenance
|
||||
|
||||
### Backups
|
||||
|
||||
Back up your Authentik installation:
|
||||
```bash
|
||||
cd /docker/authentik
|
||||
docker compose down
|
||||
tar -czf authentik-backup.tar.gz ./*
|
||||
docker compose up -d
|
||||
```
|
||||
|
||||
### Updates
|
||||
|
||||
Update Authentik to the latest version:
|
||||
```bash
|
||||
cd /docker/authentik
|
||||
docker compose pull
|
||||
docker compose up -d
|
||||
```
|
||||
|
||||
## Security Notes
|
||||
|
||||
- Change default passwords after initial setup
|
||||
- Enable 2FA for admin account
|
||||
- Regularly update all services
|
||||
- Monitor logs for suspicious activity
|
||||
- Back up data regularly
|
||||
|
||||
## License
|
||||
|
||||
This project is licensed under the MIT License - see the [LICENSE](LICENSE) file for details.
|
||||
|
||||
## Acknowledgments
|
||||
|
||||
- [Authentik Project](https://goauthentik.io/)
|
||||
- [CloudPanel](https://www.cloudpanel.io/)
|
||||
- Docker Community
|
||||
- All contributors and testers
|
||||
|
||||
## Support
|
||||
|
||||
For issues and support:
|
||||
1. Check the [troubleshooting guide](https://forum.hhf.technology/t/complete-guide-installing-authentik-with-cloudpanel-ubuntu-24-04-only/457)
|
||||
2. Open an issue on the above troubleshooting link.
|
||||
3. Visit the [Authentik Documentation](https://goauthentik.io/docs/)
|
Loading…
Reference in a new issue