Update goauthentik to v2026.2.1

With 2025.12, authentik expects /media at /data/media

docker-compose.yml

@@ -2,15 +2,14 @@ name: authentik
 
 services:
   server:
-    image: ghcr.io/goauthentik/server:2025.2.4
+    image: ghcr.io/goauthentik/server:2026.2.1
     container_name: authentik_server
     depends_on:
       - db_pg17
-      - redis
     command: server
     restart: unless-stopped
     volumes:
-      - /srv/authentik/media:/media
+      - /srv/authentik/media:/data/media
       - /srv/authentik/custom-templates:/templates
     #ports:
     #  - "${COMPOSE_PORT_HTTP:-7000}:9000"
@@ -19,7 +18,6 @@ services:
       - internal
       - proxy
     environment:
-      AUTHENTIK_REDIS__HOST: redis
       AUTHENTIK_POSTGRESQL__HOST: db_pg17
       AUTHENTIK_POSTGRESQL__NAME: file:///run/secrets/db_name
       AUTHENTIK_POSTGRESQL__USER: file:///run/secrets/db_user
@@ -32,11 +30,10 @@ services:
       - secret
 
   worker:
-    image: ghcr.io/goauthentik/server:2025.2.4
+    image: ghcr.io/goauthentik/server:2026.2.1
     container_name: authentik_worker
     depends_on:
       - db_pg17
-      - redis
     command: worker
     restart: unless-stopped
     # `user: root` and the docker socket volume are optional.
@@ -48,13 +45,12 @@ services:
     user: authentik
     volumes:
       #- /var/run/docker.sock:/var/run/docker.sock
-      - /srv/authentik/media:/media
+      - /srv/authentik/media:/data/media
       - /srv/authentik/certs:/certs
       - /srv/authentik/custom-templates:/templates
     networks:
       - internal
     environment:
-      AUTHENTIK_REDIS__HOST: redis
       AUTHENTIK_POSTGRESQL__HOST: db_pg17
       AUTHENTIK_POSTGRESQL__NAME: file:///run/secrets/db_name
       AUTHENTIK_POSTGRESQL__USER: file:///run/secrets/db_user
@@ -79,7 +75,7 @@ services:
       - mail_server
 
   ldap:
-    image: ghcr.io/goauthentik/ldap:2025.2.4
+    image: ghcr.io/goauthentik/ldap:2026.2.1
     container_name: authentik_ldap
     depends_on:
       - server
@@ -99,7 +95,7 @@ services:
       - ldap_api_key
 
   db_pg17:
-    image: docker.io/library/postgres:17.4
+    image: docker.io/library/postgres:17.9
     container_name: authentik_db_pg17
     restart: unless-stopped
     healthcheck:
@@ -121,29 +117,10 @@ services:
       - db_user
       - db_pass
 
-  redis:
-    image: docker.io/library/redis:alpine
-    container_name: authentik_redis
-    command: --save 60 1 --loglevel warning
-    restart: unless-stopped
-    healthcheck:
-      test: ["CMD-SHELL", "redis-cli ping | grep PONG"]
-      start_period: 20s
-      interval: 30s
-      retries: 5
-      timeout: 3s
-    volumes:
-      - redis:/data
-    networks:
-      - internal
-
 volumes:
   db_pg17:
     driver: local
     name: authentik_db_pg17
-  redis:
-    driver: local
-    name: authentik_redis
 
 networks:
   internal:

renovate.json

@@ -0,0 +1,12 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "config:recommended"
+  ],
+  "packageRules": [
+    {
+      "matchPackageNames": ["/goauthentik/"],
+      "groupName": "goauthentik"
+    }
+  ]
+}