diff --git a/user/authentik/APKBUILD b/user/authentik/APKBUILD
index 1e72225..31bd16b 100644
--- a/user/authentik/APKBUILD
+++ b/user/authentik/APKBUILD
@@ -1,16 +1,18 @@
-# Maintainer: Antoine Martin (ayakael) <dev@ayakael.net>
 # Contributor: Antoine Martin (ayakael) <dev@ayakael.net>
-
+# Maintainer: Antoine Martin (ayakael) <dev@ayakael.net>
 pkgname=authentik
-pkgver=2024.2.1
+pkgver=2024.2.2
 pkgrel=0
 pkgdesc="An open-source Identity Provider focused on flexibility and versatility"
 url="https://github.com/goauthentik/authentik"
-# py3-xmlsec needs some work
-arch="all"
+# s390x: missing py3-celery py3-flower and py3-kombu
+# armhf/armv7/x86: out of memory error when building goauthentik
+# ppc64le: not supported by Rollup build
+arch="aarch64 x86_64"
 license="MIT"
 depends="
 	libcap-setcap
+	nginx
 	postgresql
 	procps
 	pwgen
@@ -147,7 +149,7 @@ makedepends="go npm"
 # checkdepends scooped up by poetry due to number
 checkdepends="poetry py3-coverage"
 # tests disabled for now
-options="!check chmod-clean"
+options="!check"
 install="$pkgname.post-install $pkgname.post-upgrade $pkgname.pre-install"
 source="
 	$pkgname-$pkgver.tar.gz::https://github.com/goauthentik/authentik/archive/refs/tags/version/$pkgver.tar.gz
@@ -160,6 +162,8 @@ source="
 	"
 builddir="$srcdir/"authentik-version-$pkgver
 subpackages="$pkgname-openrc $pkgname-doc"
+pkgusers="authentik"
+pkggroups="authentik"
 
 export GOPATH=$srcdir/go
 export GOCACHE=$srcdir/go-build
@@ -187,11 +191,6 @@ build() {
 	npm run build
 }
 
-check() {
-	poetry install --only dev
-	make test
-}
-
 package() {
 	msg "Packaging $pkgname"
 	mkdir -p "$pkgdir"/usr/share/webapps/authentik/web
@@ -225,6 +224,7 @@ package() {
 		"$pkgdir"/etc/conf.d/$pkgname-ldap
 	install -Dm640 "$builddir"/authentik/lib/default.yml \
 		"$pkgdir"/etc/authentik/config.yml
+	chown root:www-data "$pkgdir"/etc/authentik/config.yml
 	sed -i 's|cert_discovery_dir.*|cert_discovery_dir: /var/lib/authentik/certs|' "$pkgdir"/etc/authentik/config.yml
 	sed -i 's|blueprints_dir.*|blueprints_dir: /var/lib/authentik/blueprints|' "$pkgdir"/etc/authentik/config.yml
 	sed -i 's|template_dir.*|template_dir: /var/lib/authentik/templates|' "$pkgdir"/etc/authentik/config.yml
@@ -236,7 +236,7 @@ package() {
 }
 
 sha512sums="
-ae177d10b024c72e5b2f793bf837e78dc5b7f58ec45c6b7474a457257df317b7464923e3ba950f74643edee7a1591dfd83285185c6db333a7d5639fae12b98c8  authentik-2024.2.1.tar.gz
+98b7265b8ed32dde659dc984c4a71097da2ab7c32f3361984f56cfb97226ea8b2f4fdf1a3d019d341cff92c9832a3964038bf5eca3aae238a18c2445dbcf0ed8  authentik-2024.2.2.tar.gz
 4defb4fe3a4230f4aa517fbecd5e5b8bcef2a64e1b40615660ae9eec33597310a09df5e126f4d39ce7764bd1716c0a7040637699135c103cbc1879593c6c06f1  authentik.openrc
 5d7f28bf5a9f358a0fc3634b2bac6d070c276c3f8181d26fa7e94a17503a4d54556bf7c3207ccd6cb924b81754ed965795d5e2a8aa1af409fd9e32d390ec4cf5  authentik-worker.openrc
 351e6920d987861f8bf0d7ab2f942db716a8dbdad1f690ac662a6ef29ac0fd46cf817cf557de08f1c024703503d36bc8b46f0d9eb1ecaeb399dce4c3bb527d17  authentik-ldap.openrc
diff --git a/user/authentik/authentik.post-install b/user/authentik/authentik.post-install
index ca0a6e6..a715d20 100755
--- a/user/authentik/authentik.post-install
+++ b/user/authentik/authentik.post-install
@@ -12,7 +12,6 @@ if [ $(grep '@@SECRET_KEY@@' "$config_file") ]; then
 	secret_key="$(pwgen -s 50 1)"
 	sed -i "s|@@SECRET_KEY@@|$secret_key|" "$config_file"
 	chown root:$group "$config_file"
-	chmod 0640 "$config_file"
 fi
 
 if [ "${0##*.}" = 'post-upgrade' ]; then