Stack Sizer
Size a self-hosted stack from official sources.
Load and options
authentik
v1.0.0Load
Up to 500 users and 20 connected apps, ~1,000 logins a day (~3,000 events a day), an LDAP or SCIM sync of all users every few hours.
Options
No options change this app's resources.
Recommended resources
App requirements + system baseline + safety headroom. Nothing else is added, and nothing is rounded to a machine size.
vCPU 4.32, RAM 4.8 GiB, Disk 18.745 GiB
vCPU4.32
RAM4.8GiB
Disk18.745GiB
Breakdown
| Line | From | vCPU | RAM (GiB) | Disk (GiB) | Sources |
|---|---|---|---|---|---|
| authentik | authentik server (web UI, API, flows, embedded outpost) · Medium load | 1.5 | 1 | 1.5 | 1234 |
| authentik | authentik worker (background tasks) · Medium load | 1 | 0.75 | 0 | 532 |
| authentik | PostgreSQL · Medium load | 1 | 1 | 6.5 | 678910111213143 |
| System baseline | Operating system, Container runtime (Docker Engine, containerd), System logs (journald), plus logs for 3 containers | 0.1 | 1.25 | 8.3 | 151617181920 |
| Safety headroom | vCPU 20%, RAM 20%, disk 15% of apps + baseline | 0.72 | 0.8 | 2.445 | 2116221923 |
| Recommended total | 4.32 | 4.8 | 18.745 |
Sources
- authentik Docs: Docker Compose installation (at least 2 CPU cores and 2 GB RAM; PG_PASS and AUTHENTIK_SECRET_KEY in .env; Docker socket optional, manual outposts; initial setup) (authentik, read 14 Oct 2026)
- goauthentik/helm: charts/authentik/values.yaml at authentik-2026.8.3 (example requests for server and worker: 100m CPU, 512Mi memory each; server ports 9000, 9443, 9300) (authentik, read 14 Oct 2026)
- authentik Docs: Configuration (PostgreSQL 14 - 18; AUTHENTIK_POSTGRESQL__*; listen 9000, 9443, metrics 9300; trusted proxy CIDRs default to private ranges; storage in /data; secret key signs cookies) (authentik, read 14 Oct 2026)
- GHCR manifest of ghcr.io/goauthentik/server:2026.8.3 (linux/amd64): 382,343,402 B compressed (364.6 MiB), built 2026-09-17, user 1000 (authentik, read 14 Oct 2026)
- authentik Docs: Worker (tasks queued in PostgreSQL; processes × threads, default 1 × 2, run at once; LDAP sync split into pages of 50 plus a meta task; old tasks purged after TASK_EXPIRATION) (authentik, read 14 Oct 2026)
- PostgreSQL 18 documentation: 19.4 Resource Consumption (authentik, read 10 Oct 2026)
- PostgreSQL 18 documentation: 19.3 Connections and Authentication (authentik, read 10 Oct 2026)
- PostgreSQL 18 documentation: 19.10 Vacuuming (autovacuum settings) (authentik, read 10 Oct 2026)
- PostgreSQL 18 documentation: 19.5 Write Ahead Log (max_wal_size) (authentik, read 10 Oct 2026)
- PostgreSQL 18 documentation: 51.2 How Connections Are Established (authentik, read 10 Oct 2026)
- Docker Official Image postgres: documentation (docker-library/docs) (authentik, read 10 Oct 2026)
- Docker Hub: library/postgres tag 18.6 (compressed image sizes) (authentik, read 10 Oct 2026)
- authentik Docs: Events (event retention set in System > Settings, default 365 days; forward logs and shorten retention for long-term storage) (authentik, read 14 Oct 2026)
- authentik Release 2025.10 (Redis removed: cache, embedded outpost and WebSockets on PostgreSQL, roughly 50% more database connections) (authentik, read 14 Oct 2026)
- Ubuntu Server: System requirements (Sizing policy, read 10 Oct 2026)
- Google Kubernetes Engine: About GKE node sizing (Sizing policy, read 10 Oct 2026)
- ANAROQ measurement: dockerd and containerd at rest (Ubuntu 24.04, Docker 29.8.2) (Sizing policy, read 10 Oct 2026)
- Docker Community Forums: Docker resource usage & overhead (Sizing policy, read 10 Oct 2026)
- journald.conf(5), Ubuntu Manpages (Sizing policy, read 10 Oct 2026)
- Docker Docs: Local file logging driver (Sizing policy, read 10 Oct 2026)
- AWS Compute Optimizer: Rightsizing recommendation preferences (Sizing policy, read 10 Oct 2026)
- Kubernetes: Node-pressure Eviction (Sizing policy, read 10 Oct 2026)
- mke2fs(8), Ubuntu Manpages (Sizing policy, read 10 Oct 2026)
Deployment Spec
Turn this result into a link you can keep or share. Everything is in the link; nothing is sent to us.
A short lowercase image id, for example ubuntu-24.04.