[{"_1":2,"_191":-5,"_192":-5},"loaderData",{"_3":4,"_13":14,"_21":22,"_160":161},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","routes/_layout",{"_15":-5,"_16":17,"_18":17,"_19":11,"_20":11},"username","isAskGordonEnabled",true,"isUsingNewTemplate","showMinimalLanding","showHoneypotTrap","routes/_layout.r.$namespace.$reponame",{"_23":24,"_25":-5,"_26":11,"_27":11,"_28":29,"_30":31,"_32":-5,"_33":11,"_34":35,"_84":-5,"_85":86,"_151":-5,"_152":11,"_153":17,"_154":11,"_155":-5,"_156":11,"_157":-5,"_158":159},"canonicalUrl","https://hub.docker.com/r/certyiknofetch/aeusio/tags","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","certyiknofetch","reponame","aeusio","cloudBuildSource","isAutobuildsAvailable","repo",{"_36":37,"_38":39,"_41":42,"_43":44,"_45":11,"_46":47,"_48":49,"_50":51,"_53":31,"_28":29,"_54":55,"_56":-5,"_57":58,"_59":60,"_61":62,"_63":-5,"_64":58,"_65":66,"_67":11,"_68":29,"_69":70,"_75":11,"_76":77,"_81":29,"_82":83},"categories",[],"content_types",[40],"image","date_registered","2026-02-28T06:05:55.440093Z","description","","is_private","last_updated","2026-02-28T06:29:45.475757Z","last_modified","2026-02-28T07:09:25.878109Z","media_types",[52],"application/vnd.oci.image.index.v1+json","name","pull_count",466,"repository_type","star_count",0,"status",1,"status_description","active","source","collaborator_count","full_description","

\n \n

\n\n---\n

\n\n# 🔐 Aeusio\n\n### _Identity Provider with SSO, MFA, and fine-grained access control for every application_\n\n---\n\n[![Version](https://img.shields.io/docker/v/certyiknofetch/aeusio?sort=semver&label=version&style=for-the-badge&logo=docker&logoColor=white&color=6366f1&labelColor=4338ca)](https://hub.docker.com/r/certyiknofetch/aeusio)\n[![Size](https://img.shields.io/docker/image-size/certyiknofetch/aeusio/latest?label=size&style=for-the-badge&logo=docker&logoColor=white&color=10b981&labelColor=059669)](https://hub.docker.com/r/certyiknofetch/aeusio)\n[![Pulls](https://img.shields.io/docker/pulls/certyiknofetch/aeusio?label=pulls&style=for-the-badge&logo=docker&logoColor=white&color=f59e0b&labelColor=d97706)](https://hub.docker.com/r/certyiknofetch/aeusio)\n\n---\n\n

\n\n**Aeusio** is a hardened, privacy-focused identity provider built for teams and organizations that need complete control over authentication and access management — without exposing internal software fingerprints.\n\n## Features\n\n- **Single Sign-On (SSO)** — SAML 2.0, OAuth2 / OpenID Connect, LDAP, SCIM, and forward-auth proxy support.\n- **Multi-Factor Authentication** — TOTP, WebAuthn / FIDO2, SMS, Email OTP, and Duo.\n- **Flows & Stages** — Fully customizable login, enrollment, recovery, and consent workflows via a visual editor.\n- **Application Proxy** — Built-in reverse-auth proxy for protecting legacy apps that don't natively support SSO.\n- **Directory Sync** — Inbound and outbound sync with Microsoft Entra ID (Azure AD), LDAP, Google Workspace, and more.\n- **Microsoft Graph Email** — Send transactional emails (password resets, OTP codes, notifications) via Microsoft Graph API with OAuth2 client credentials — no SMTP relay required.\n- **Blueprints** — Declarative YAML-based configuration for reproducible, version-controlled deployments.\n- **Branding & Theming** — Fully white-label: custom logos, colors, email templates, and branded flows.\n- **Security Hardened** — Version fingerprinting mitigated (no version in static assets, HTTP headers, or console logs), timing-safe secret comparison, atomic token operations, and strict signature validation.\n- **Enterprise Ready** — RBAC, audit logging, event notifications, and high-availability support.\n\n## Quick Start\n\n### Docker Compose\n\n```yaml\nservices:\n server:\n image: certyiknofetch/authentik:1.3.1\n command: server\n ports:\n - \"9000:9000\"\n - \"9443:9443\"\n environment:\n AUTHENTIK_SECRET_KEY: \n AUTHENTIK_POSTGRESQL__HOST: postgresql\n AUTHENTIK_POSTGRESQL__NAME: authentik\n AUTHENTIK_POSTGRESQL__USER: authentik\n AUTHENTIK_POSTGRESQL__PASSWORD: \n volumes:\n - ./data:/data\n - ./custom-templates:/templates\n depends_on:\n postgresql:\n condition: service_healthy\n\n worker:\n image: certyiknofetch/authentik:1.3.1\n command: worker\n environment:\n AUTHENTIK_SECRET_KEY: \n AUTHENTIK_POSTGRESQL__HOST: postgresql\n AUTHENTIK_POSTGRESQL__NAME: authentik\n AUTHENTIK_POSTGRESQL__USER: authentik\n AUTHENTIK_POSTGRESQL__PASSWORD: \n volumes:\n - ./data:/data\n - ./custom-templates:/templates\n depends_on:\n postgresql:\n condition: service_healthy\n\n postgresql:\n image: postgres:16-alpine\n environment:\n POSTGRES_DB: authentik\n POSTGRES_USER: authentik\n POSTGRES_PASSWORD: \n volumes:\n - database:/var/lib/postgresql/data\n healthcheck:\n test: [\"CMD-SHELL\", \"pg_isready -d $${POSTGRES_DB} -U $${POSTGRES_USER}\"]\n interval: 30s\n timeout: 5s\n retries: 5\n start_period: 20s\n\nvolumes:\n database:\n```\n\n> **Note:** Redis is embedded in the server container. For production deployments with high traffic, an external Redis instance is recommended.\n\n## Tags\n\n| Tag | Description |\n|-----|-------------|\n| `latest` | Most recent stable release |\n| `1.3.1` | Current stable release |\n\n## Architectures\n\n| Architecture | Supported |\n|-------------|-----------|\n| `linux/amd64` | ✅ |\n| `linux/arm64` | ✅ |\n\n## Environment Variables\n\n| Variable | Required | Description |\n|----------|----------|-------------|\n| `AUTHENTIK_SECRET_KEY` | Yes | Secret key for signing sessions and tokens |\n| `AUTHENTIK_POSTGRESQL__HOST` | Yes | PostgreSQL hostname |\n| `AUTHENTIK_POSTGRESQL__NAME` | Yes | PostgreSQL database name |\n| `AUTHENTIK_POSTGRESQL__USER` | Yes | PostgreSQL username |\n| `AUTHENTIK_POSTGRESQL__PASSWORD` | Yes | PostgreSQL password |\n| `AUTHENTIK_REDIS__HOST` | No | External Redis host (embedded by default) |\n| `AUTHENTIK_EMAIL__HOST` | No | SMTP host for outbound email |\n| `AUTHENTIK_EMAIL__PORT` | No | SMTP port (default: `25`) |\n| `AUTHENTIK_EMAIL__USERNAME` | No | SMTP username |\n| `AUTHENTIK_EMAIL__PASSWORD` | No | SMTP password |\n| `AUTHENTIK_EMAIL__USE_TLS` | No | Enable STARTTLS (`true` / `false`) |\n| `AUTHENTIK_EMAIL__USE_SSL` | No | Enable SSL (`true` / `false`) |\n| `AUTHENTIK_EMAIL__BACKEND` | No | Set to `graph` to use Microsoft Graph instead of SMTP |\n| `AUTHENTIK_EMAIL__GRAPH__TENANT_ID` | No | Azure AD tenant ID (Graph backend) |\n| `AUTHENTIK_EMAIL__GRAPH__CLIENT_ID` | No | Azure AD app client ID (Graph backend) |\n| `AUTHENTIK_EMAIL__GRAPH__CLIENT_SECRET` | No | Azure AD app client secret (Graph backend) |\n| `AUTHENTIK_EMAIL__GRAPH__SENDER` | No | Sender email address (Graph backend) |\n\n## Volumes\n\n| Path | Description |\n|------|-------------|\n| `/data` | Persistent data (media, certs) |\n| `/templates` | Custom email and flow templates |\n| `/blueprints/custom` | Custom blueprint definitions |\n| `/certs` | TLS certificates |\n\n## Ports\n\n| Port | Protocol | Description |\n|------|----------|-------------|\n| `9000` | HTTP | Web interface and API |\n| `9443` | HTTPS | Web interface and API (TLS) |\n| `9300` | HTTP | Metrics (Prometheus) |\n| `3389` | TCP | RAC (Remote Access Control) |\n\n## Security\n\n- No version information exposed in HTTP headers, static asset filenames, or browser console\n- Content-hash-based static asset filenames to prevent version fingerprinting\n- Timing-safe secret comparison for OAuth2 flows\n- Atomic database transactions for token operations\n- Strict SAML assertion signature verification\n- Secure file permissions for TLS and SSH key material\n\n## License || Source\n\nBased on [Authentik](https://github.com/goauthentik/authentik) with security hardening and enhancements.\nThis image is distributed under the same license terms as the upstream project.","has_starred","hub_user","immutable_tags_settings",{"_71":11,"_72":73},"enabled","rules",[74],".*","is_automated","permissions",{"_78":17,"_79":11,"_80":11},"read","write","admin","user","storage_size",584845914,"orgData","recentTags",[87,142],{"_88":40,"_89":90,"_91":92,"_93":94,"_95":96,"_97":98,"_46":131,"_132":90,"_133":29,"_134":52,"_53":135,"_136":137,"_138":123,"_139":131,"_140":62,"_141":17},"content_type","creator",34072143,"digest","sha256:dd061ad5a606c34c5e2834868f7e54ce5f4bb939b33e33a3a825456a6dcbdfa9","full_size",297315471,"id",1087750186,"images",[99,114,120,126],{"_100":101,"_91":102,"_103":44,"_104":105,"_106":107,"_108":109,"_110":44,"_111":-5,"_112":94,"_59":62,"_113":-5},"architecture","amd64","sha256:14bb2d96c651af504a86a174742d455a0b69975ee0b5eb9f2ff7f9bf3d693242","features","last_pulled","2026-09-27T12:35:14.567645478Z","last_pushed","2026-02-28T06:29:36.919979552Z","os","linux","os_features","os_version","size","variant",{"_100":115,"_91":116,"_103":44,"_104":117,"_106":118,"_108":109,"_110":44,"_111":-5,"_112":119,"_59":62,"_113":-5},"arm64","sha256:8f989e93b7725fd82eed998d07d4ce99ef4a659188d91349e103678d5f120adc","2026-09-27T12:35:14.563437408Z","2026-02-28T06:05:53.882315821Z",293918446,{"_100":121,"_91":122,"_103":44,"_104":123,"_106":124,"_108":121,"_110":44,"_111":-5,"_112":125,"_59":62,"_113":-5},"unknown","sha256:a4e793606724adc79f90527525ff3518f7a1a993d1d473b8bf2905fc2ef906a3","2026-09-27T12:35:14.603486798Z","2026-02-28T06:05:55.140310295Z",2487,{"_100":121,"_91":127,"_103":44,"_104":128,"_106":129,"_108":121,"_110":44,"_111":-5,"_112":130,"_59":62,"_113":-5},"sha256:f42b03ec26c3d95603d863d15f3872542aed70ff9f8e6fe3c24aedc7c42b6e5b","2026-09-27T12:35:14.587073444Z","2026-02-28T06:29:37.996060247Z",2486,"2026-02-28T06:29:44.232753Z","last_updater","last_updater_username","media_type","latest","repository",30247109,"tag_last_pulled","tag_last_pushed","tag_status","v2",{"_88":40,"_89":90,"_91":92,"_93":94,"_95":143,"_97":144,"_46":149,"_132":90,"_133":29,"_134":52,"_53":150,"_136":137,"_138":123,"_139":149,"_140":62,"_141":17},1087750169,[145,146,147,148],{"_100":101,"_91":102,"_103":44,"_104":105,"_106":107,"_108":109,"_110":44,"_111":-5,"_112":94,"_59":62,"_113":-5},{"_100":115,"_91":116,"_103":44,"_104":117,"_106":118,"_108":109,"_110":44,"_111":-5,"_112":119,"_59":62,"_113":-5},{"_100":121,"_91":122,"_103":44,"_104":123,"_106":124,"_108":121,"_110":44,"_111":-5,"_112":125,"_59":62,"_113":-5},{"_100":121,"_91":127,"_103":44,"_104":128,"_106":129,"_108":121,"_110":44,"_111":-5,"_112":130,"_59":62,"_113":-5},"2026-02-28T06:29:42.382585Z","1.1.1","sbxKitMetadata","isPotentialSpam","isHubSbxKitsEnabled","showSbxLogoOverride","sbxTrademarkText","displaySecurityMetadata","tagAttestations","tagsHaveAttestations",[],"routes/_layout.r.$namespace.$reponame.tags",{"_34":162,"_169":170,"_158":189,"_190":11},{"_36":163,"_38":164,"_41":42,"_43":44,"_45":11,"_46":47,"_48":49,"_50":165,"_53":31,"_28":29,"_54":55,"_56":-5,"_57":58,"_59":60,"_61":62,"_63":-5,"_64":58,"_65":66,"_67":11,"_68":29,"_69":166,"_75":11,"_76":168,"_81":29,"_82":83},[],[40],[52],{"_71":11,"_72":167},[74],{"_78":17,"_79":11,"_80":11},"tags",{"_171":172,"_173":-5,"_174":-5,"_175":176},"count",2,"next","previous","results",[177,183],{"_88":40,"_89":90,"_91":92,"_93":94,"_95":96,"_97":178,"_46":131,"_132":90,"_133":29,"_134":52,"_53":135,"_136":137,"_138":123,"_139":131,"_140":62,"_141":17},[179,180,181,182],{"_100":101,"_91":102,"_103":44,"_104":105,"_106":107,"_108":109,"_110":44,"_111":-5,"_112":94,"_59":62,"_113":-5},{"_100":115,"_91":116,"_103":44,"_104":117,"_106":118,"_108":109,"_110":44,"_111":-5,"_112":119,"_59":62,"_113":-5},{"_100":121,"_91":122,"_103":44,"_104":123,"_106":124,"_108":121,"_110":44,"_111":-5,"_112":125,"_59":62,"_113":-5},{"_100":121,"_91":127,"_103":44,"_104":128,"_106":129,"_108":121,"_110":44,"_111":-5,"_112":130,"_59":62,"_113":-5},{"_88":40,"_89":90,"_91":92,"_93":94,"_95":143,"_97":184,"_46":149,"_132":90,"_133":29,"_134":52,"_53":150,"_136":137,"_138":123,"_139":149,"_140":62,"_141":17},[185,186,187,188],{"_100":101,"_91":102,"_103":44,"_104":105,"_106":107,"_108":109,"_110":44,"_111":-5,"_112":94,"_59":62,"_113":-5},{"_100":115,"_91":116,"_103":44,"_104":117,"_106":118,"_108":109,"_110":44,"_111":-5,"_112":119,"_59":62,"_113":-5},{"_100":121,"_91":122,"_103":44,"_104":123,"_106":124,"_108":121,"_110":44,"_111":-5,"_112":125,"_59":62,"_113":-5},{"_100":121,"_91":127,"_103":44,"_104":128,"_106":129,"_108":121,"_110":44,"_111":-5,"_112":130,"_59":62,"_113":-5},[],"canDeleteTags","actionData","errors"]

Digest	OS/ARCH	Compressed size
14bb2d96c651	linux/amd64	283.54 MB
8f989e93b772	linux/arm64	280.3 MB

certyiknofetch/aeusio

Tags for certyiknofetch/aeusio