authentik Platform packages

Desktop packages

🚀 Debian-based distribution Setup

Step 1: Add GPG Key

curl -fsSL https://pkg.goauthentik.io/keys/gpg-key.asc | sudo gpg --dearmor -o /usr/share/keyrings/authentik-keyring.gpg

Step 2: Add Repository

echo "deb [signed-by=/usr/share/keyrings/authentik-keyring.gpg] https://pkg.goauthentik.io stable main" | sudo tee /etc/apt/sources.list.d/authentik.list

Step 3: Update and Install

sudo apt update
sudo apt install authentik-cli

🚀 Red Hat-based distribution Setup

Step 1: Add GPG Key

# This overwrites any existing configuration in /etc/yum.repos.d/authentik.repo
cat <<EOF | sudo tee /etc/yum.repos.d/authentik.repo
[authentik]
name=authentik
baseurl=https://pkg.goauthentik.io
enabled=1
gpgcheck=1
gpgkey=https://pkg.goauthentik.io/keys/gpg-key.asc
EOF

Step 2: Install

sudo yum install -y authentik-cli

Nix/NixOS Setup

Option 1: Direct Installation

# Install with binary cache
nix profile install github:goauthentik/platform#ak-cli \
  --extra-substituters "https://pkg.goauthentik.ionix" \
  --extra-trusted-public-keys "authentik-pkg:ZZHUD/9SkS8T1BVVoksE/+QjIo0s3F8/AM/h0J3ckaw="

# Available packages: ak-cli, ak-sysd, ak-agent, ak-browser-support
# Linux only: libpam-authentik, libnss-authentik

Option 2: Permanent Cache Configuration

Add to /etc/nix/nix.conf or ~/.config/nix/nix.conf:

extra-substituters = https://pkg.goauthentik.ionix
extra-trusted-public-keys = authentik-pkg:ZZHUD/9SkS8T1BVVoksE/+QjIo0s3F8/AM/h0J3ckaw=

Then install normally:

nix profile install github:goauthentik/platform#ak-cli

Option 3: NixOS Configuration

# In your flake.nix inputs:
authentik.url = "github:goauthentik/platform";

# In your NixOS configuration:
{ authentik, ... }: {
  imports = [ authentik.nixosModules.default ];
  services.authentik = {
    enable = true;
    enablePAM = true;
    enableNSS = true;
  };
}

Option 4: nix-darwin Configuration (macOS)

# In your flake.nix inputs:
authentik.url = "github:goauthentik/platform";

# In your darwin configuration:
{ authentik, ... }: {
  imports = [ authentik.darwinModules.default ];
  nixpkgs.overlays = [ authentik.overlays.default ];
  services.authentik.enable = true;
}

This installs the .app bundle to /Applications/ and configures launchd to run ak-sysd.

Available Nix Packages

PackageDescriptionPlatforms
ak-cliCommand-line interfaceLinux, macOS
ak-sysdSystem daemonLinux, macOS
ak-agentLocal agent (includes all binaries on macOS)Linux, macOS
ak-browser-supportBrowser extension supportLinux, macOS
libpam-authentikPAM authentication moduleLinux
libnss-authentikNSS name resolution moduleLinux

Repository Information

Built from: refs/pull/525/merge (741a2dec0114dd5399425c7df70e0653820fdb0c)

GPG Key fingerprint: 82EE AAD5 531A 856A 9C72 6132 2217 2AF2 AAE3 A237