[Container]
DropCapability=ALL
EnvironmentFile=/etc/authentik/.env
Exec=worker
Image=hcr.io/goauthentik/server:2025.10.0
NoNewPrivileges=true
Pod=authentik.pod
Volume=/var/lib/authentik/media:/media
Volume=/var/lib/authentik/custom-templates:/templates
Volume=/var/lib/authentik/certs:/certs

[Service]
StateDirectory=authentik
ConfigurationDirectory=authentik
Restart=always