diff --git a/modules/cloud/authentik/default.nix b/modules/cloud/authentik/default.nix
index 9c51f39..4a3d262 100644
--- a/modules/cloud/authentik/default.nix
+++ b/modules/cloud/authentik/default.nix
@@ -22,8 +22,8 @@ let
     };
     authentik = mkImage {
       imageName = "ghcr.io/goauthentik/server";
-      finalImageTag = "2024.1.0.4";
-      imageDigest = "sha256:5843c56a56be58dcee8927c705f8c9def0af7189511c0e8e687d430f543b0f6d";
+      finalImageTag = "2025.2.1";
+      imageDigest = "sha256:dc07e81b4462a1dad9c6720f4c73993e37d7cb2d2f94a306187318704d112e71";
     };
   };
   authentikEnv = pkgs.writeText "authentik.env" ''