[Container]
DropCapability=ALL
EnvironmentFile=/etc/authentik/.env
Exec=server
Image=ghcr.io/goauthentik/server:2025.10.0
NoNewPrivileges=true
Pod=authentik.pod
Volume=/var/lib/authentik/media:/media
Volume=/var/lib/authentik/custom-templates:/templates

[Service]
StateDirectory=authentik
ConfigurationDirectory=authentik
Restart=always