authentik-integration
Add an application to Authentik and apply the standard policy stack (deny -> group -> superuser) with Traefik labels.
Skill by DasCarstel
Chalk Labs
Need help deploying authentik-integration?
Chalk Labs sets up agents like this inside real teams: connected to your tools, tested on your data, with a human in the loop where it matters.
Install
Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.
npx agentmarket install skill/dascarstel-authentik-integration
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Use cases: backend
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this skill can do and what it asks for, from its SKILL.md. Checked Oct 25, 2026.
- Tools
- No tools found
- Secrets
- None asked for
- Install scripts
- None found
Network hosts it talks to 1
codeload.github.com· found in install command
Files it touches
~/.claude/skills/authentik-integration
What's inside
- Skill name
authentik-integration- Description
- Add an application to Authentik and apply the standard policy stack (deny -> group -> superuser) with Traefik labels.
- License
- MIT
- Instructions
- 47 lines in SKILL.md · view on GitHub
Files (1)
- SKILL.md
SKILL.md (first lines)
# Authentik – Adding an Application ## Standard policy stack Every application follows this order-based chain: ``` Order 0: Default Deny -> blocks everyone by default Order 1: <group> binding -> allows specific group members Order 2: Allow Superuser -> allows superusers (admin) ``` ### Recommended groups | App category | Examples | Group | |--------------|----------|-------| | Admin-only | Proxmox, Portainer, Traefik | `admin` | | Media | Sonarr, Radarr, Jellyfin | `medien-tools` | | Productivity | Stirling PDF, Excalidraw | `produktivitaet` | | Monitoring | Uptime Kuma, Homarr | `monitoring` | | Public | Homer dashboard | No deny, group only | **CRITICAL: always ask the user which group to apply.** ## Workflow 1. Check `https://integrations.goauthentik.io/<app>/` for native SSO. 2. Native SSO -> create an OAuth2 Provider; Proxy -> create a Proxy Provider + Application. 3. Apply the standard policy stack (Default Deny -> Group -> Superuser). 4. Assign to the Outpost. 5. Add Traefik labels. 6. Verify the login flow. ## Traefik labels ```yaml labels: - "traefik.http.routers.<app>-secure.middlewares=authentik@docker" - "traefik.docker.network=proxy" ``` ## Related - `authentik` – MCP setup and tool groups - `authentik-troubleshooting` – error fixes
From DasCarstel/opencode-coder-env, MIT.
More from DasCarstel/opencode-coder-env
- 0.564score
obsidian-ocis
DasCarstel
Create, find, read, list or edit notes in the private Obsidian vault via the fast oCIS CLI.
SkillAFreshness: AClaude Code +9 - 0.564score
notion-database
DasCarstel
Find, read, add, edit or delete Schuldenliste rows via the fast Notion CLI.
SkillAFreshness: AClaude Code +9 - 0.561score
home-assistant
DasCarstel
Home Assistant diagnostics and configuration via native MCP server.
SkillAFreshness: AClaude Code +9 - 0.561score
obsidian
DasCarstel
Read and write notes in the MuellerConnect work vault on OpenCloud (oCIS) for the mini job.
SkillAFreshness: AClaude Code +9 - 0.561score
authentik
DasCarstel
Authentik SSO via the community authentik-mcp server.
SkillAFreshness: AClaude Code +9 - 0.561score
docker-host-location
DasCarstel
Resolves which ssh-mcp profile to use for Docker ops in this workspace.
SkillAFreshness: AClaude Code +9 - 0.561score
notification
DasCarstel
Nachricht an den ntfy-Hub (Phone/Windows-PC) senden — für lange Läufe, fertige Aufträge oder wenn eine Rückfrage offen bleibt.
SkillAFreshness: AClaude Code +9 - 0.561score
docker-host
DasCarstel
Docker Host operations via the ssh-mcp server.
SkillAFreshness: AClaude Code +9 - 0.561score
docker-host-compose
DasCarstel
Docker Compose on a Docker host via ssh-mcp.
SkillAFreshness: AClaude Code +9 - 0.561score
docker-host-filesystem
DasCarstel
File operations on a Docker host via ssh-mcp.
SkillAFreshness: AClaude Code +9 - 0.561score
docker-host-git
DasCarstel
Git operations on a Docker host /etc/docker repo via ssh-mcp.
SkillAFreshness: AClaude Code +9 - 0.561score
docker-host-location
DasCarstel
Resolves which ssh-mcp profile to use for Docker ops in this workspace.
SkillAFreshness: AClaude Code +9
Signals
- Stars
- 0
- Forks
- 0
- Open issues
- 0
- Last commit (this folder)
- Oct 6, 2026 (24 days ago)
From GitHub (fetched Oct 24, 2026).
Details
- License
- MIT
- Repository
- github.com/DasCarstel/opencode-coder-env
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
- Source
- GitHubgithub-graphql
More from DasCarstel
- 0.564score
obsidian-ocis
DasCarstel
Create, find, read, list or edit notes in the private Obsidian vault via the fast oCIS CLI.
SkillAFreshness: AClaude Code +9 - 0.564score
notion-database
DasCarstel
Find, read, add, edit or delete Schuldenliste rows via the fast Notion CLI.
SkillAFreshness: AClaude Code +9 - 0.561score
obsidian
DasCarstel
Read and write notes in the MuellerConnect work vault on OpenCloud (oCIS) for the mini job.
SkillAFreshness: AClaude Code +9 - 0.561score
home-assistant
DasCarstel
Home Assistant diagnostics and configuration via native MCP server.
SkillAFreshness: AClaude Code +9 - 0.561score
super-productivity
DasCarstel
Todolisten aus Super Productivity lesen und Tasks anlegen.
SkillAFreshness: AClaude Code +9 - 0.561score
obsidian
DasCarstel
Read and write notes in the private Obsidian vault on OpenCloud (oCIS).
SkillAFreshness: AClaude Code +9
Done for you
Rather not set it up yourself?
Chalk Labs scopes, builds and runs agents for your team: the task audit, the eval harness, the integrations and the weekly ops report. Fixed scope, priced before we start.
See how we build AI agents →Read the case studies
Chalk Labs is a two-founder AI and growth studio. We build AI agents, CRMs and MVPs for Web3 and AI companies, and have shipped 50+ product and token launches.
- launches shipped
- 50+
- launches shipped
- media placements
- 500+
- media placements
- founders on every account
- 2
- founders on every account
Press we've placed: Forbes · CoinDesk · Decrypt · Cointelegraph · The Block
Rahil Jain, Co-founder, Chalk Labs. Ex-Goldman Sachs engineer. You talk to the person who builds it.
Get authentik-integration running in your business
Tell us what you want to automate. A founder replies within one working day with a plan, not a pitch deck.
Cite this page
authentik-integration skill. Agent Mart. https://agentmart.dev/skills/dascarstel-authentik-integration (last updated 2026-10-24)