services:
  outpost:
    image: ghcr.io/goauthentik/proxy:2026.5.6
    container_name: authentik-outpost-seaweedfs
    restart: unless-stopped
    environment:
      AUTHENTIK_HOST: https://auth.xiteng.site
      AUTHENTIK_TOKEN: ${AUTHENTIK_OUTPOST_SEAWEEDFS_TOKEN}
      AUTHENTIK_INSECURE: "true"
    labels:
      - "traefik.enable=false"
      - "xiteng.site.component.seaweedfs-outpost.enabled=true"
      - "xiteng.site.component.seaweedfs-outpost.name=SeaweedFS Auth Outpost"
      - "xiteng.site.component.seaweedfs-outpost.description=为 SeaweedFS Web 入口提供独立 ForwardAuth 会话。"
      - "xiteng.site.component.seaweedfs-outpost.section=infrastructure"
      - "xiteng.site.component.seaweedfs-outpost.category=身份与访问"
      - "xiteng.site.component.seaweedfs-outpost.access=internal"
      - "xiteng.site.component.seaweedfs-outpost.access-label=认证回调组件"
      - "xiteng.site.component.seaweedfs-outpost.icon=OP"
      - "xiteng.site.component.seaweedfs-outpost.icon-url=https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/authentik.svg"
      - "xiteng.site.component.seaweedfs-outpost.accent=blue"
      - "xiteng.site.component.seaweedfs-outpost.order=220"
    ports:
      - "9003:9000"
    networks:
      - homelab_net

networks:
  homelab_net:
    external: true