Taalam Maana SSO — Authentik

Self-hosted SSO solution using Authentik for Taalam Maana.

Quick Start

Prerequisites

• Docker & Docker Compose v2+
• A domain or IP pointing to your server (access via http://<host>:9000)

Setup

1. Clone & configure:

   git clone https://git.ahmadelmasri.com/builder/taalam-maana-sso.git
   cd taalam-maana-sso
   cp .env.example .env
   

2. Generate secrets:

   # Generate AUTHENTIK_SECRET_KEY (min 50 chars)
   docker run --rm ghcr.io/goauthentik/server:2026.2.1 generate-secret-key
   
   # Generate POSTGRES_PASSWORD
   openssl rand -base64 32
   

3. Update .env with your generated secrets and domain.

4. Create required directories with correct permissions:

   mkdir -p media custom-templates
   chown -R 1000:1000 media custom-templates
   

5. Start services:

   docker compose up -d
   

6. Create the first admin user: Open http://<your-server-ip>:9000/if/flow/initial-setup/ in your browser. You'll be guided through creating the first admin account and completing initial setup.

Production Checklist

• Set strong AUTHENTIK_SECRET_KEY
• Set strong POSTGRES_PASSWORD
• Set up a reverse proxy (Traefik/Caddy/Nginx) for SSL termination
• Set up database backups
• Configure email backend for notifications
• Review Authentik security docs

Documentation

• User Management & Roles
• OAuth2/OIDC Integration

Maintenance

# View logs
docker compose logs -f

# Restart services
docker compose restart

# Update Authentik
# Check the latest stable version at https://goauthentik.io/docs/releases/
# Always back up your database first.
docker compose pull
docker compose up -d