From 6fdf8257f0ad819a026fa638656437ea6f579f7e Mon Sep 17 00:00:00 2001 From: Thieneret Date: Mon, 1 Jun 2026 09:37:23 +0200 Subject: [PATCH 01/15] update authentik --- ct/authentik.sh | 143 ++++++++++++++++++++++++++++++++--- install/authentik-install.sh | 68 +++++++++++++---- 2 files changed, 187 insertions(+), 24 deletions(-) diff --git a/ct/authentik.sh b/ct/authentik.sh index cda7a7e628f..77972eaf8fa 100644 --- a/ct/authentik.sh +++ b/ct/authentik.sh @@ -8,7 +8,7 @@ source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxV APP="authentik" var_tags="${var_tags:-auth}" var_cpu="${var_cpu:-4}" -var_ram="${var_ram:-4096}" +var_ram="${var_ram:-8192}" var_disk="${var_disk:-16}" var_os="${var_os:-debian}" var_version="${var_version:-13}" @@ -22,20 +22,29 @@ catch_errors function update_script() { header_info - check_container_storage - check_container_resources if [[ ! -d /opt/authentik ]]; then msg_error "No authentik Installation Found!" exit fi + CUR_VERSION="$(<"$HOME/.authentik")" + IFS='.' read -ra PARTS <<< "${CUR_VERSION#version/}" + MAJOR=${PARTS[0]} + MINOR=${PARTS[1]} + + check_container_storage + check_container_resources + + msg_info "Update dependencies" + ensure_dependencies crossbuild-essential-amd64 gcc-x86-64-linux-gnu cmake clang libunwind-18-dev + msg_ok "Update dependencies" + NODE_VERSION="24" setup_nodejs setup_go UV_PYTHON_INSTALL_DIR="/usr/local/bin" PYTHON_VERSION="3.14.3" setup_uv - setup_rust - AUTHENTIK_VERSION="version/2026.2.3" + AUTHENTIK_VERSION="version/2026.5.2" XMLSEC_VERSION="1.3.11" if check_for_gh_release "geoipupdate" "maxmind/geoipupdate"; then @@ -71,7 +80,20 @@ function update_script() { CLEAN_INSTALL=1 fetch_and_deploy_gh_release "authentik" "goauthentik/authentik" "tarball" "${AUTHENTIK_VERSION}" "/opt/authentik" - msg_info "Updating web" + msg_info "Clearing rust" + rm -rf /root/.cargo /root/.rustup + msg_ok "Clearing rust" + + msg_info "Setup custom rust" + cd /opt/authentik + export PATH="/root/.cargo/bin:$PATH" + echo 'export PATH="/root/.cargo/bin:$PATH"' >>"/root/.profile" + curl https://sh.rustup.rs -sSf | $STD sh -s -- -y --profile minimal --default-toolchain none + $STD rustup install + $STD rustup default "$(sed -n 's/channel = "\(.*\)"/\1/p' rust-toolchain.toml)" + msg_ok "Setup custom rust" + + msg_info "Updating web" cd /opt/authentik/web export NODE_ENV="production" $STD npm install @@ -89,6 +111,14 @@ function update_script() { $STD go build -o /opt/authentik/radius ./cmd/radius msg_ok "Updated go proxy" + msg_info "Building worker" + export AWS_LC_FIPS_SYS_CC="clang" + cd /opt/authentik + $STD cargo build --package authentik --no-default-features --features core --locked --release --jobs 1 + cp ./target/release/authentik /opt/authentik/authentik-worker + rm -r ./target + msg_ok "Buildt worker" + msg_info "Updating python server" export UV_NO_BINARY_PACKAGE="cryptography lxml python-kadmin-rs xmlsec" export UV_COMPILE_BYTECODE="1" @@ -100,6 +130,103 @@ function update_script() { $STD uv sync --frozen --no-install-project --no-dev chown -R authentik:authentik /opt/authentik msg_ok "Updated python server" + + if [[ $MAJOR == 2026 && $MINOR -lt 5 ]]; then + msg_info "Updating Worker and Server config" + cp /etc/authentik/config.yml /etc/authentik/config.bak + yq -i ".postgresql.conn_max_age = 0" /etc/authentik/config.yml + yq -i ".postgresql.conn_health_checks = false" /etc/authentik/config.yml + yq -i ".listen.debug_tokio = \"[::]:6669\"" /etc/authentik/config.yml + yq -i ".log.rust_log.console_subscriber = \"info\"" /etc/authentik/config.yml + yq -i ".log.rust_log.h2 = \"info\"" /etc/authentik/config.yml + yq -i ".log.rust_log.hyper_util = \"warn\"" /etc/authentik/config.yml + yq -i ".log.rust_log.mio = \"info\"" /etc/authentik/config.yml + yq -i ".log.rust_log.notify = \"info\"" /etc/authentik/config.yml + yq -i ".log.rust_log.reqwest = \"info\"" /etc/authentik/config.yml + yq -i ".log.rust_log.runtime = \"info\"" /etc/authentik/config.yml + yq -i ".log.rust_log.rustls = \"info\"" /etc/authentik/config.yml + yq -i ".log.rust_log.sqlx = \"info\"" /etc/authentik/config.yml + yq -i ".log.rust_log.sqlx_postgres = \"info\"" /etc/authentik/config.yml + yq -i ".log.rust_log.tokio = \"info\"" /etc/authentik/config.yml + yq -i ".log.rust_log.tungstenite = \"info\"" /etc/authentik/config.yml + yq -i ".web.workers = 2" /etc/authentik/config.yml + mv /etc/default/authentik /etc/default/authentik.bak + cat </etc/default/authentik-server +TMPDIR=/dev/shm/ +UV_LINK_MODE=copy +UV_PYTHON_DOWNLOADS=0 +UV_NATIVE_TLS=1 +VENV_PATH=/opt/authentik/.venv +PYTHONDONTWRITEBYTECODE=1 +PYTHONUNBUFFERED=1 +PATH=/opt/authentik/lifecycle:/opt/authentik/.venv/bin:/usr/local/bin:/usr/local/sbin:/usr/sbin:/usr/bin:/sbin:/bin +DJANGO_SETTINGS_MODULE=authentik.root.settings +PROMETHEUS_MULTIPROC_DIR="/tmp/authentik_prometheus_tmp" +AUTHENTIK_LISTEN__HTTP="[::]:9000" +AUTHENTIK_LISTEN__HTTPS="[::]:9443" +AUTHENTIK_LISTEN__METRICS="[::]:9300" +EOF + cat </etc/default/authentik-worker +TMPDIR=/dev/shm/ +UV_LINK_MODE=copy +UV_PYTHON_DOWNLOADS=0 +UV_NATIVE_TLS=1 +VENV_PATH=/opt/authentik/.venv +PYTHONDONTWRITEBYTECODE=1 +PYTHONUNBUFFERED=1 +PATH=/opt/authentik/lifecycle:/opt/authentik/.venv/bin:/usr/local/bin:/usr/local/sbin:/usr/sbin:/usr/bin:/sbin:/bin +DJANGO_SETTINGS_MODULE=authentik.root.settings +PROMETHEUS_MULTIPROC_DIR="/tmp/authentik_prometheus_tmp" +AUTHENTIK_LISTEN__HTTP="[::]:8000" +AUTHENTIK_LISTEN__HTTPS="[::]:8443" +AUTHENTIK_LISTEN__METRICS="[::]:8300" +EOF + msg_ok "Updated Worker and Server config!" + msg_warn "Please check /etc/default/authentik-worker and /etc/default/authentik-server config files for port configurations!" + + msg_info "Updating services" + cat </etc/systemd/system/authentik-server.service +[Unit] +Description=authentik Go Server (API Gateway) +After=network.target authentik-worker.service +Wants=postgresql.service authentik-worker.service + +[Service] +User=authentik +Group=authentik +ExecStartPre=/usr/bin/mkdir -p "\${PROMETHEUS_MULTIPROC_DIR}" +ExecStart=/opt/authentik/authentik-server +WorkingDirectory=/opt/authentik/ +Restart=always +RestartSec=5 +EnvironmentFile=/etc/default/authentik-server + +[Install] +WantedBy=multi-user.target +EOF + + cat </etc/systemd/system/authentik-worker.service +[Unit] +Description=authentik Worker +After=network.target postgresql.service + +[Service] +User=authentik +Group=authentik +Type=simple +EnvironmentFile=/etc/default/authentik-worker +ExecStartPre=/usr/bin/mkdir -p "\${PROMETHEUS_MULTIPROC_DIR}" +ExecStart=/opt/authentik/authentik-worker worker +WorkingDirectory=/opt/authentik +Restart=always +RestartSec=5 + +[Install] +WantedBy=multi-user.target +EOF + systemctl daemon-reload + msg_ok "Updated services" + fi fi msg_info "Starting Services" @@ -150,7 +277,5 @@ description msg_ok "Completed successfully!\n" echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}" -echo -e "${INFO}${YW} Initial setup URL:${CL}" -echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:9000/if/flow/initial-setup/${CL}" echo -e "${INFO}${YW} Access it using the following URL:${CL}" -echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:9000${CL}" +echo -e "${TAB}${GATEWAY}${BGN}https://${IP}:9443${CL}" diff --git a/install/authentik-install.sh b/install/authentik-install.sh index bc761e31680..4d04c055a2a 100644 --- a/install/authentik-install.sh +++ b/install/authentik-install.sh @@ -29,8 +29,6 @@ $STD apt install -y \ libltdl-dev \ libpq5 \ libmaxminddb0 \ - libkrb5-3 \ - libkdb5-10 \ libkadm5clnt-mit12 \ libkadm5clnt7t64-heimdal \ libltdl7 \ @@ -44,6 +42,11 @@ $STD apt install -y \ libtool \ libtool-bin \ gcc \ + crossbuild-essential-amd64 \ + gcc-x86-64-linux-gnu \ + cmake \ + clang \ + libunwind-18-dev \ git msg_ok "Installed Dependencies" @@ -51,12 +54,11 @@ NODE_VERSION="24" setup_nodejs setup_yq setup_go UV_PYTHON_INSTALL_DIR="/usr/local/bin" PYTHON_VERSION="3.14.3" setup_uv -setup_rust PG_VERSION="17" setup_postgresql PG_DB_NAME="authentik" PG_DB_USER="authentik" PG_DB_GRANT_SUPERUSER="true" setup_postgresql_db XMLSEC_VERSION="1.3.11" -AUTHENTIK_VERSION="version/2026.2.3" +AUTHENTIK_VERSION="version/2026.5.2" fetch_and_deploy_gh_release "xmlsec" "lsh123/xmlsec" "tarball" "${XMLSEC_VERSION}" "/opt/xmlsec" fetch_and_deploy_gh_release "authentik" "goauthentik/authentik" "tarball" "${AUTHENTIK_VERSION}" "/opt/authentik" fetch_and_deploy_gh_release "geoipupdate" "maxmind/geoipupdate" "binary" @@ -68,7 +70,16 @@ $STD make -j $(nproc) $STD make check $STD make install $STD ldconfig -msg_ok "xmlsec installed" +msg_ok "Setup xmlsec" + +msg_info "Setup custom rust" +cd /opt/authentik +export PATH="/root/.cargo/bin:$PATH" +echo 'export PATH="/root/.cargo/bin:$PATH"' >>"/root/.profile" +curl https://sh.rustup.rs -sSf | $STD sh -s -- -y --profile minimal --default-toolchain none +$STD rustup install +$STD rustup default "$(sed -n 's/channel = "\(.*\)"/\1/p' rust-toolchain.toml)" +msg_ok "Setup custom rust" msg_info "Setup web" cd /opt/authentik/web @@ -76,17 +87,18 @@ export NODE_ENV="production" $STD npm install $STD npm run build $STD npm run build:sfe -msg_ok "Web installed" +msg_ok "Setup web" msg_info "Setup go proxy" cd /opt/authentik export CGO_ENABLED="1" +export CC="x86_64-linux-gnu-gcc" $STD go mod download $STD go build -o /opt/authentik/authentik-server ./cmd/server $STD go build -o /opt/authentik/ldap ./cmd/ldap $STD go build -o /opt/authentik/rac ./cmd/rac $STD go build -o /opt/authentik/radius ./cmd/radius -msg_ok "Go proxy installed" +msg_ok "Setup go proxy" cat </usr/local/etc/GeoIP.conf AccountID ChangeME @@ -99,17 +111,23 @@ EOF echo "#39 19 * * 6,4 /usr/bin/geoipupdate -f /usr/local/etc/GeoIP.conf" | crontab - +msg_info "Building worker" +export AWS_LC_FIPS_SYS_CC="clang" +cd /opt/authentik +$STD cargo build --package authentik --no-default-features --features core --locked --release --jobs 1 +cp ./target/release/authentik /opt/authentik/authentik-worker +msg_ok "Building worker" + msg_info "Setup python server" export UV_NO_BINARY_PACKAGE="cryptography lxml python-kadmin-rs xmlsec" export UV_COMPILE_BYTECODE="1" export UV_LINK_MODE="copy" export UV_NATIVE_TLS="1" -export RUSTUP_PERMIT_COPY_RENAME="true" export UV_PYTHON_INSTALL_DIR="/usr/local/bin" cd /opt/authentik $STD uv sync --frozen --no-install-project --no-dev cp /opt/authentik/authentik/sources/kerberos/krb5.conf /etc/krb5.conf -msg_ok "Installed python server" +msg_ok "Setup python server" msg_info "Creating authentik config" mkdir -p /etc/authentik @@ -125,7 +143,7 @@ yq -i ".storage.file.path = \"/opt/authentik-data\"" /etc/authentik/config.yml yq -i ".disable_startup_analytics = \"true\"" /etc/authentik/config.yml $STD useradd -U -s /usr/sbin/nologin -r -M -d /opt/authentik authentik chown -R authentik:authentik /opt/authentik -cat </etc/default/authentik +cat </etc/default/authentik-server TMPDIR=/dev/shm/ UV_LINK_MODE=copy UV_PYTHON_DOWNLOADS=0 @@ -136,6 +154,24 @@ PYTHONUNBUFFERED=1 PATH=/opt/authentik/lifecycle:/opt/authentik/.venv/bin:/usr/local/bin:/usr/local/sbin:/usr/sbin:/usr/bin:/sbin:/bin DJANGO_SETTINGS_MODULE=authentik.root.settings PROMETHEUS_MULTIPROC_DIR="/tmp/authentik_prometheus_tmp" +AUTHENTIK_LISTEN__HTTP="[::]:9000" +AUTHENTIK_LISTEN__HTTPS="[::]:9443" +AUTHENTIK_LISTEN__METRICS="[::]:9300" +EOF +cat </etc/default/authentik-worker +TMPDIR=/dev/shm/ +UV_LINK_MODE=copy +UV_PYTHON_DOWNLOADS=0 +UV_NATIVE_TLS=1 +VENV_PATH=/opt/authentik/.venv +PYTHONDONTWRITEBYTECODE=1 +PYTHONUNBUFFERED=1 +PATH=/opt/authentik/lifecycle:/opt/authentik/.venv/bin:/usr/local/bin:/usr/local/sbin:/usr/sbin:/usr/bin:/sbin:/bin +DJANGO_SETTINGS_MODULE=authentik.root.settings +PROMETHEUS_MULTIPROC_DIR="/tmp/authentik_prometheus_tmp" +AUTHENTIK_LISTEN__HTTP="[::]:8000" +AUTHENTIK_LISTEN__HTTPS="[::]:8443" +AUTHENTIK_LISTEN__METRICS="[::]:8300" EOF cat </etc/default/authentik_ldap AUTHENTIK_HOST="https://127.0.0.1:9443" @@ -152,7 +188,7 @@ AUTHENTIK_HOST="https://127.0.0.1:9443" AUTHENTIK_INSECURE="true" AUTHENTIK_TOKEN="token-generated-by-authentik" EOF -msg_ok "authentik config created" +msg_ok "Created authentik config" msg_info "Creating services" cat </etc/systemd/system/authentik-server.service @@ -164,12 +200,12 @@ Wants=postgresql.service [Service] User=authentik Group=authentik +EnvironmentFile=/etc/default/authentik-server ExecStartPre=/usr/bin/mkdir -p "\${PROMETHEUS_MULTIPROC_DIR}" ExecStart=/opt/authentik/authentik-server WorkingDirectory=/opt/authentik/ Restart=always RestartSec=5 -EnvironmentFile=/etc/default/authentik [Install] WantedBy=multi-user.target @@ -184,8 +220,9 @@ After=network.target postgresql.service User=authentik Group=authentik Type=simple -EnvironmentFile=/etc/default/authentik -ExecStart=/usr/local/bin/uv run python -m manage worker --pid-file /dev/shm/authentik-worker.pid +EnvironmentFile=/etc/default/authentik-worker +ExecStartPre=/usr/bin/mkdir -p "\${PROMETHEUS_MULTIPROC_DIR}" +ExecStart=/opt/authentik/authentik-worker worker WorkingDirectory=/opt/authentik Restart=always RestartSec=5 @@ -250,7 +287,8 @@ EnvironmentFile=/etc/default/authentik_radius [Install] WantedBy=multi-user.target EOF -msg_ok "Services created" + +msg_ok "Created services" motd_ssh customize From 0accd6e0597cbb98b31c00517604216b189d4b13 Mon Sep 17 00:00:00 2001 From: thieneret <123479547+thieneret@users.noreply.github.com> Date: Mon, 1 Jun 2026 11:02:44 +0200 Subject: [PATCH 02/15] Apply e Co-authored-by: Tobias <96661824+CrazyWolf13@users.noreply.github.com> --- install/authentik-install.sh | 1 - 1 file changed, 1 deletion(-) diff --git a/install/authentik-install.sh b/install/authentik-install.sh index 4d04c055a2a..4dbcf87f27b 100644 --- a/install/authentik-install.sh +++ b/install/authentik-install.sh @@ -287,7 +287,6 @@ EnvironmentFile=/etc/default/authentik_radius [Install] WantedBy=multi-user.target EOF - msg_ok "Created services" motd_ssh From 2ac56e4354d9e67aadaed4f2394fd8f646265ec5 Mon Sep 17 00:00:00 2001 From: thieneret <123479547+thieneret@users.noreply.github.com> Date: Mon, 1 Jun 2026 11:04:52 +0200 Subject: [PATCH 03/15] Apply requested change --- ct/authentik.sh | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/ct/authentik.sh b/ct/authentik.sh index 77972eaf8fa..981ea388586 100644 --- a/ct/authentik.sh +++ b/ct/authentik.sh @@ -22,7 +22,9 @@ catch_errors function update_script() { header_info - + check_container_storage + check_container_resources + if [[ ! -d /opt/authentik ]]; then msg_error "No authentik Installation Found!" exit @@ -33,9 +35,6 @@ function update_script() { MAJOR=${PARTS[0]} MINOR=${PARTS[1]} - check_container_storage - check_container_resources - msg_info "Update dependencies" ensure_dependencies crossbuild-essential-amd64 gcc-x86-64-linux-gnu cmake clang libunwind-18-dev msg_ok "Update dependencies" From 7b776e90e2b1096282b9c6f613c9e80dc9532203 Mon Sep 17 00:00:00 2001 From: Thieneret Date: Tue, 2 Jun 2026 01:05:38 +0200 Subject: [PATCH 04/15] refactored --- ct/authentik.sh | 18 ++++++------------ install/authentik-install.sh | 9 ++++----- 2 files changed, 10 insertions(+), 17 deletions(-) diff --git a/ct/authentik.sh b/ct/authentik.sh index 981ea388586..2b1f9a93bdc 100644 --- a/ct/authentik.sh +++ b/ct/authentik.sh @@ -24,7 +24,7 @@ function update_script() { header_info check_container_storage check_container_resources - + if [[ ! -d /opt/authentik ]]; then msg_error "No authentik Installation Found!" exit @@ -42,6 +42,7 @@ function update_script() { NODE_VERSION="24" setup_nodejs setup_go UV_PYTHON_INSTALL_DIR="/usr/local/bin" PYTHON_VERSION="3.14.3" setup_uv + RUST_PROFILE="minimal" RUST_TOOLCHAIN="1.95.0" setup_rust AUTHENTIK_VERSION="version/2026.5.2" XMLSEC_VERSION="1.3.11" @@ -79,18 +80,11 @@ function update_script() { CLEAN_INSTALL=1 fetch_and_deploy_gh_release "authentik" "goauthentik/authentik" "tarball" "${AUTHENTIK_VERSION}" "/opt/authentik" - msg_info "Clearing rust" - rm -rf /root/.cargo /root/.rustup - msg_ok "Clearing rust" - - msg_info "Setup custom rust" + msg_info "Configure rust" cd /opt/authentik - export PATH="/root/.cargo/bin:$PATH" - echo 'export PATH="/root/.cargo/bin:$PATH"' >>"/root/.profile" - curl https://sh.rustup.rs -sSf | $STD sh -s -- -y --profile minimal --default-toolchain none $STD rustup install $STD rustup default "$(sed -n 's/channel = "\(.*\)"/\1/p' rust-toolchain.toml)" - msg_ok "Setup custom rust" + msg_ok "Configure rust" msg_info "Updating web" cd /opt/authentik/web @@ -187,8 +181,8 @@ EOF cat </etc/systemd/system/authentik-server.service [Unit] Description=authentik Go Server (API Gateway) -After=network.target authentik-worker.service -Wants=postgresql.service authentik-worker.service +After=network.target +Wants=postgresql.service [Service] User=authentik diff --git a/install/authentik-install.sh b/install/authentik-install.sh index 4dbcf87f27b..4f4664d3a9b 100644 --- a/install/authentik-install.sh +++ b/install/authentik-install.sh @@ -53,6 +53,7 @@ msg_ok "Installed Dependencies" NODE_VERSION="24" setup_nodejs setup_yq setup_go +RUST_PROFILE="minimal" RUST_TOOLCHAIN="1.95.0" setup_rust UV_PYTHON_INSTALL_DIR="/usr/local/bin" PYTHON_VERSION="3.14.3" setup_uv PG_VERSION="17" setup_postgresql PG_DB_NAME="authentik" PG_DB_USER="authentik" PG_DB_GRANT_SUPERUSER="true" setup_postgresql_db @@ -72,14 +73,11 @@ $STD make install $STD ldconfig msg_ok "Setup xmlsec" -msg_info "Setup custom rust" +msg_info "Configure rust" cd /opt/authentik -export PATH="/root/.cargo/bin:$PATH" -echo 'export PATH="/root/.cargo/bin:$PATH"' >>"/root/.profile" -curl https://sh.rustup.rs -sSf | $STD sh -s -- -y --profile minimal --default-toolchain none $STD rustup install $STD rustup default "$(sed -n 's/channel = "\(.*\)"/\1/p' rust-toolchain.toml)" -msg_ok "Setup custom rust" +msg_ok "Configure rust" msg_info "Setup web" cd /opt/authentik/web @@ -116,6 +114,7 @@ export AWS_LC_FIPS_SYS_CC="clang" cd /opt/authentik $STD cargo build --package authentik --no-default-features --features core --locked --release --jobs 1 cp ./target/release/authentik /opt/authentik/authentik-worker +rm -r ./target msg_ok "Building worker" msg_info "Setup python server" From 8b925c1bd9272acc6115a3452856aca89e610c54 Mon Sep 17 00:00:00 2001 From: "CanbiZ (MickLesk)" <47820557+MickLesk@users.noreply.github.com> Date: Tue, 2 Jun 2026 09:21:09 +0200 Subject: [PATCH 05/15] Update install/authentik-install.sh Co-authored-by: Tobias <96661824+CrazyWolf13@users.noreply.github.com> --- install/authentik-install.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/install/authentik-install.sh b/install/authentik-install.sh index 4f4664d3a9b..f5f36b12cf3 100644 --- a/install/authentik-install.sh +++ b/install/authentik-install.sh @@ -117,7 +117,7 @@ cp ./target/release/authentik /opt/authentik/authentik-worker rm -r ./target msg_ok "Building worker" -msg_info "Setup python server" +msg_info "Setting up python server" export UV_NO_BINARY_PACKAGE="cryptography lxml python-kadmin-rs xmlsec" export UV_COMPILE_BYTECODE="1" export UV_LINK_MODE="copy" From 2713e681f241bbbbcaa65ea950eef64bea4ffb04 Mon Sep 17 00:00:00 2001 From: "CanbiZ (MickLesk)" <47820557+MickLesk@users.noreply.github.com> Date: Tue, 2 Jun 2026 09:21:19 +0200 Subject: [PATCH 06/15] Update install/authentik-install.sh Co-authored-by: Tobias <96661824+CrazyWolf13@users.noreply.github.com> --- install/authentik-install.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/install/authentik-install.sh b/install/authentik-install.sh index f5f36b12cf3..92c65acb226 100644 --- a/install/authentik-install.sh +++ b/install/authentik-install.sh @@ -115,7 +115,7 @@ cd /opt/authentik $STD cargo build --package authentik --no-default-features --features core --locked --release --jobs 1 cp ./target/release/authentik /opt/authentik/authentik-worker rm -r ./target -msg_ok "Building worker" +msg_ok "Built worker" msg_info "Setting up python server" export UV_NO_BINARY_PACKAGE="cryptography lxml python-kadmin-rs xmlsec" From 96a3b98347bf3aac9607701757cab0bac0da8915 Mon Sep 17 00:00:00 2001 From: "CanbiZ (MickLesk)" <47820557+MickLesk@users.noreply.github.com> Date: Tue, 2 Jun 2026 09:21:29 +0200 Subject: [PATCH 07/15] Update install/authentik-install.sh Co-authored-by: Tobias <96661824+CrazyWolf13@users.noreply.github.com> --- install/authentik-install.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/install/authentik-install.sh b/install/authentik-install.sh index 92c65acb226..d1ed5b57f47 100644 --- a/install/authentik-install.sh +++ b/install/authentik-install.sh @@ -87,7 +87,7 @@ $STD npm run build $STD npm run build:sfe msg_ok "Setup web" -msg_info "Setup go proxy" +msg_info "Setting up go proxy" cd /opt/authentik export CGO_ENABLED="1" export CC="x86_64-linux-gnu-gcc" From 7337c959068a6f4039bf33439176f3f597d5ef4b Mon Sep 17 00:00:00 2001 From: "CanbiZ (MickLesk)" <47820557+MickLesk@users.noreply.github.com> Date: Tue, 2 Jun 2026 09:21:41 +0200 Subject: [PATCH 08/15] Update install/authentik-install.sh Co-authored-by: Tobias <96661824+CrazyWolf13@users.noreply.github.com> --- install/authentik-install.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/install/authentik-install.sh b/install/authentik-install.sh index d1ed5b57f47..91226bb55d8 100644 --- a/install/authentik-install.sh +++ b/install/authentik-install.sh @@ -77,7 +77,7 @@ msg_info "Configure rust" cd /opt/authentik $STD rustup install $STD rustup default "$(sed -n 's/channel = "\(.*\)"/\1/p' rust-toolchain.toml)" -msg_ok "Configure rust" +msg_ok "Configured rust" msg_info "Setup web" cd /opt/authentik/web From 6e6eeb00aaa77128b55924e7b32e700f650160cb Mon Sep 17 00:00:00 2001 From: "CanbiZ (MickLesk)" <47820557+MickLesk@users.noreply.github.com> Date: Tue, 2 Jun 2026 10:57:12 +0200 Subject: [PATCH 09/15] Update install/authentik-install.sh Co-authored-by: Tobias <96661824+CrazyWolf13@users.noreply.github.com> --- install/authentik-install.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/install/authentik-install.sh b/install/authentik-install.sh index 91226bb55d8..20a2a68d774 100644 --- a/install/authentik-install.sh +++ b/install/authentik-install.sh @@ -73,7 +73,7 @@ $STD make install $STD ldconfig msg_ok "Setup xmlsec" -msg_info "Configure rust" +msg_info "Configuring rust" cd /opt/authentik $STD rustup install $STD rustup default "$(sed -n 's/channel = "\(.*\)"/\1/p' rust-toolchain.toml)" From f33dacf3a031a93bdec8b82405c3c27b30118a8d Mon Sep 17 00:00:00 2001 From: "CanbiZ (MickLesk)" <47820557+MickLesk@users.noreply.github.com> Date: Tue, 2 Jun 2026 10:57:34 +0200 Subject: [PATCH 10/15] Update ct/authentik.sh Co-authored-by: Tobias <96661824+CrazyWolf13@users.noreply.github.com> --- ct/authentik.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ct/authentik.sh b/ct/authentik.sh index 2b1f9a93bdc..7adceb60360 100644 --- a/ct/authentik.sh +++ b/ct/authentik.sh @@ -80,7 +80,7 @@ function update_script() { CLEAN_INSTALL=1 fetch_and_deploy_gh_release "authentik" "goauthentik/authentik" "tarball" "${AUTHENTIK_VERSION}" "/opt/authentik" - msg_info "Configure rust" + msg_info "Configuring rust" cd /opt/authentik $STD rustup install $STD rustup default "$(sed -n 's/channel = "\(.*\)"/\1/p' rust-toolchain.toml)" From 3ab1a0fa4af67737a19a256de26145346b874666 Mon Sep 17 00:00:00 2001 From: "CanbiZ (MickLesk)" <47820557+MickLesk@users.noreply.github.com> Date: Tue, 2 Jun 2026 10:58:59 +0200 Subject: [PATCH 11/15] Update ct/authentik.sh Co-authored-by: Tobias <96661824+CrazyWolf13@users.noreply.github.com> --- ct/authentik.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ct/authentik.sh b/ct/authentik.sh index 7adceb60360..05e609caa43 100644 --- a/ct/authentik.sh +++ b/ct/authentik.sh @@ -84,7 +84,7 @@ function update_script() { cd /opt/authentik $STD rustup install $STD rustup default "$(sed -n 's/channel = "\(.*\)"/\1/p' rust-toolchain.toml)" - msg_ok "Configure rust" + msg_ok "Configured rust" msg_info "Updating web" cd /opt/authentik/web From 7b63f0517ca33413009a6a366d0d4d15180556c3 Mon Sep 17 00:00:00 2001 From: "CanbiZ (MickLesk)" <47820557+MickLesk@users.noreply.github.com> Date: Tue, 2 Jun 2026 11:00:10 +0200 Subject: [PATCH 12/15] Update ct/authentik.sh Co-authored-by: Tobias <96661824+CrazyWolf13@users.noreply.github.com> --- ct/authentik.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ct/authentik.sh b/ct/authentik.sh index 05e609caa43..d35cea78014 100644 --- a/ct/authentik.sh +++ b/ct/authentik.sh @@ -110,7 +110,7 @@ function update_script() { $STD cargo build --package authentik --no-default-features --features core --locked --release --jobs 1 cp ./target/release/authentik /opt/authentik/authentik-worker rm -r ./target - msg_ok "Buildt worker" + msg_ok "Built worker" msg_info "Updating python server" export UV_NO_BINARY_PACKAGE="cryptography lxml python-kadmin-rs xmlsec" From bc8848f7241db98143c28ba7f0fba3a075776011 Mon Sep 17 00:00:00 2001 From: "CanbiZ (MickLesk)" <47820557+MickLesk@users.noreply.github.com> Date: Tue, 2 Jun 2026 11:00:21 +0200 Subject: [PATCH 13/15] Update install/authentik-install.sh Co-authored-by: Tobias <96661824+CrazyWolf13@users.noreply.github.com> --- install/authentik-install.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/install/authentik-install.sh b/install/authentik-install.sh index 20a2a68d774..3e71ab16dbd 100644 --- a/install/authentik-install.sh +++ b/install/authentik-install.sh @@ -79,7 +79,7 @@ $STD rustup install $STD rustup default "$(sed -n 's/channel = "\(.*\)"/\1/p' rust-toolchain.toml)" msg_ok "Configured rust" -msg_info "Setup web" +msg_info "Setting up web" cd /opt/authentik/web export NODE_ENV="production" $STD npm install From 2bd183f8f3950141d020fe983e7690470eef817f Mon Sep 17 00:00:00 2001 From: Thieneret Date: Tue, 2 Jun 2026 11:37:41 +0200 Subject: [PATCH 14/15] update rust --- ct/authentik.sh | 2 +- install/authentik-install.sh | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/ct/authentik.sh b/ct/authentik.sh index d35cea78014..f5beb715ab1 100644 --- a/ct/authentik.sh +++ b/ct/authentik.sh @@ -42,7 +42,7 @@ function update_script() { NODE_VERSION="24" setup_nodejs setup_go UV_PYTHON_INSTALL_DIR="/usr/local/bin" PYTHON_VERSION="3.14.3" setup_uv - RUST_PROFILE="minimal" RUST_TOOLCHAIN="1.95.0" setup_rust + RUST_PROFILE="minimal" RUST_TOOLCHAIN="stable" setup_rust AUTHENTIK_VERSION="version/2026.5.2" XMLSEC_VERSION="1.3.11" diff --git a/install/authentik-install.sh b/install/authentik-install.sh index 3e71ab16dbd..26028cea41f 100644 --- a/install/authentik-install.sh +++ b/install/authentik-install.sh @@ -53,7 +53,7 @@ msg_ok "Installed Dependencies" NODE_VERSION="24" setup_nodejs setup_yq setup_go -RUST_PROFILE="minimal" RUST_TOOLCHAIN="1.95.0" setup_rust +RUST_PROFILE="minimal" RUST_TOOLCHAIN="stable" setup_rust UV_PYTHON_INSTALL_DIR="/usr/local/bin" PYTHON_VERSION="3.14.3" setup_uv PG_VERSION="17" setup_postgresql PG_DB_NAME="authentik" PG_DB_USER="authentik" PG_DB_GRANT_SUPERUSER="true" setup_postgresql_db From 928c54f622001ab33c4275b02273102a385e39b8 Mon Sep 17 00:00:00 2001 From: "CanbiZ (MickLesk)" <47820557+MickLesk@users.noreply.github.com> Date: Tue, 2 Jun 2026 11:43:35 +0200 Subject: [PATCH 15/15] Update install/authentik-install.sh Co-authored-by: Tobias <96661824+CrazyWolf13@users.noreply.github.com> --- install/authentik-install.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/install/authentik-install.sh b/install/authentik-install.sh index 26028cea41f..f959493ddb4 100644 --- a/install/authentik-install.sh +++ b/install/authentik-install.sh @@ -64,7 +64,7 @@ fetch_and_deploy_gh_release "xmlsec" "lsh123/xmlsec" "tarball" "${XMLSEC_VERSION fetch_and_deploy_gh_release "authentik" "goauthentik/authentik" "tarball" "${AUTHENTIK_VERSION}" "/opt/authentik" fetch_and_deploy_gh_release "geoipupdate" "maxmind/geoipupdate" "binary" -msg_info "Setup xmlsec" +msg_info "Setting up xmlsec" cd /opt/xmlsec $STD ./autogen.sh $STD make -j $(nproc)