authentik/website/docs/installation/air-gapped.md

title
Air-gapped environments

Outbound connections

By default, authentik creates outbound connections to the following URLs:

• https://version.goauthentik.io: Periodic update check
• https://goauthentik.io: Anonymous analytics on startup
• https://secure.gravatar.com: Avatars for users
• https://sentry.beryju.org: Error reporting

To disable these outbound connections, set the following in your .env file:

AUTHENTIK_DISABLE_UPDATE_CHECK=true
AUTHENTIK_ERROR_REPORTING__ENABLED=false
AUTHENTIK_DISABLE_STARTUP_ANALYTICS=true
AUTHENTIK_AVATARS=none

For a Helm-based install, set the following in your values.yaml file:

authentik:
    avatars: none
    error_reporting:
        enabled: false
    disable_update_check: true
    disable_startup_analytics: true

Container images

Container images can be pulled from the following URLs:

• ghcr.io/goauthentik/server (https://ghcr.io)
• goauthentik.io/server (https://goauthentik.io)
• beryju/authentik (https://index.docker.io)