Air-gapped environments

Outbound connections

By default, authentik creates outbound connections to the following URLs:

• https://version.goauthentik.io: Periodic update check
• https://goauthentik.io: Anonymous analytics on startup
• https://secure.gravatar.com: Avatars for users
• https://authentik.error-reporting.a7k.io: Error reporting

To disable these outbound connections, set the following in your .env file:

Configuration options

To see a list of all configuration options, see here.

docker-compose

Add the following block to your .env file:

AUTHENTIK_DISABLE_STARTUP_ANALYTICS=true
AUTHENTIK_DISABLE_UPDATE_CHECK=true
AUTHENTIK_ERROR_REPORTING__ENABLED=false

Afterwards, run the upgrade commands from the latest release notes.

Kubernetes

Add the following block to your values.yml file:

authentik:
    error_reporting:
        enabled: false
    disable_update_check: true
    disable_startup_analytics: true

Afterwards, run the upgrade commands from the latest release notes.

Settings

In addition to the configuration options above, the following System settings need to also be adjusted:

• Avatars: By default this setting uses Gravatar. The option can be set to a combination of any of the other options, for example initials

Container images

Container images can be pulled from the following URLs:

• ghcr.io/goauthentik/server (https://ghcr.io)
• beryju/authentik (https://index.docker.io)