Hi all,

Short question. Does somebody here run authentik as single sign-on provider? (dockerised?)

I’m looking for information on how to best backup a authentik server? Just do a backup of the postgres database and the docker-compose file? Something else? How crucial is the dump.rdb file of the redis container?

Kr.

  • ferngully@lemmy.world
    link
    fedilink
    English
    arrow-up
    5
    ·
    11 months ago

    You should only have to backup the Postgres database. But it won’t hurt to have a copy of your compose file as well.

    This GitHub issue has the steps you should use. And answers all your other questions too.

    • kristoffOP
      link
      fedilink
      English
      arrow-up
      1
      ·
      11 months ago

      Great thanks! (also thanks to Mike … you have some valid points)

  • kristoffOP
    link
    fedilink
    English
    arrow-up
    2
    ·
    11 months ago

    First of all, thanks to all who replied! I didn’t think there would have been that many people who self-host a SSO-server, so I am happy to see these replies.

    As a side-note, I have also been looking into making the setup more robust, i.e. add redundancy. For a “light redundant” senario (not fully automatic, but -say- where I have a 2nd instance ready to run, so I just need to adapt the DNS-record if it is needed), can I conclude from the “makeing a backup” question, that I just need to run a 2nd instance of postgres and do streaming-replication from the main instance to the backup-instance ?

    Or are there other caviats I haven’t thought about?

  • Mike@fikaverse.club
    link
    fedilink
    arrow-up
    1
    ·
    11 months ago

    @kristoff If you can do a test restore on new instance with a restored db from your back up, I say you are good to go… maybe you can benefit from restoring some cache as well but that shouldn’t be required imo. Test your back up and document your restore process!