From cbd38c581e5cf0785260c18f0a536bf2626183b8 Mon Sep 17 00:00:00 2001
From: "CanbiZ (MickLesk)" <47820557+MickLesk@users.noreply.github.com>
Date: Thu, 30 Apr 2026 14:37:57 +0200
Subject: [PATCH] fix(authentik): align install with two-volume layout from
 ct/authentik.sh

- drop redundant curl of default.yml (file is part of release tarball)
- stop creating /opt/authentik-data dirs in install (mounted later as separate volume)
- enable services without --now in install (started after data volume is attached)
---
 ct/authentik.sh              | 2 --
 install/authentik-install.sh | 6 ++----
 2 files changed, 2 insertions(+), 6 deletions(-)

diff --git a/ct/authentik.sh b/ct/authentik.sh
index 89838078..e302ea78 100644
--- a/ct/authentik.sh
+++ b/ct/authentik.sh
@@ -71,8 +71,6 @@ function update_script() {
 
     msg_info "Updating go proxy"
     cd /opt/authentik
-    $STD curl -fsSL "https://raw.githubusercontent.com/goauthentik/authentik/refs/tags/${AUTHENTIK_VERSION}/authentik/lib/default.yml" \
-      -o /opt/authentik/authentik/lib/default.yml
     export CGO_ENABLED="1"
     $STD go mod download
     $STD go build -o /opt/authentik/authentik-server ./cmd/server
diff --git a/install/authentik-install.sh b/install/authentik-install.sh
index 4a8d8a4f..f7c32649 100644
--- a/install/authentik-install.sh
+++ b/install/authentik-install.sh
@@ -80,8 +80,6 @@ msg_ok "Web installed"
 
 msg_info "Setup go proxy"
 cd /opt/authentik
-$STD curl -fsSL "https://raw.githubusercontent.com/goauthentik/authentik/refs/tags/${AUTHENTIK_VERSION}/authentik/lib/default.yml" \
-  -o /opt/authentik/authentik/lib/default.yml
 export CGO_ENABLED="1"
 $STD go mod download
 $STD go build -o /opt/authentik/authentik-server ./cmd/server
@@ -111,7 +109,7 @@ cp /opt/authentik/authentik/sources/kerberos/krb5.conf /etc/krb5.conf
 msg_ok "Installed python server"
 
 msg_info "Creating authentik config"
-mkdir -p /etc/authentik /opt/authentik-data/geoip /opt/authentik-data/certs /opt/authentik-data/templates
+mkdir -p /etc/authentik
 mv /opt/authentik/authentik/lib/default.yml /etc/authentik/config.yml
 yq -i ".secret_key = \"$(openssl rand -base64 128 | tr -dc 'a-zA-Z0-9' | head -c64)\"" /etc/authentik/config.yml
 yq -i ".postgresql.password = \"${PG_DB_PASS}\"" /etc/authentik/config.yml
@@ -176,7 +174,7 @@ RestartSec=5
 [Install]
 WantedBy=multi-user.target
 EOF
-systemctl enable -q --now authentik-server authentik-worker
+systemctl enable -q authentik-server authentik-worker
 msg_ok "Services created"
 
 motd_ssh