diff --git a/README.md b/README.md
index b21f7336..e9437caa 100644
--- a/README.md
+++ b/README.md
@@ -9,8 +9,8 @@
 
 ## authentik Chart
 
-![Version: 4.0.3](https://img.shields.io/badge/Version-4.0.3-informational?style=for-the-badge)
-![AppVersion: 2021.10.4](https://img.shields.io/badge/AppVersion-2021.10.4-informational?style=for-the-badge)
+![Version: 5.0.0](https://img.shields.io/badge/Version-5.0.0-informational?style=for-the-badge)
+![AppVersion: 2021.12.3](https://img.shields.io/badge/AppVersion-2021.12.3-informational?style=for-the-badge)
 
 See [README](./charts/authentik/README.md)
 
diff --git a/charts/authentik/Chart.yaml b/charts/authentik/Chart.yaml
index b5dd2a00..c74b354e 100644
--- a/charts/authentik/Chart.yaml
+++ b/charts/authentik/Chart.yaml
@@ -16,8 +16,8 @@ keywords:
   - ldap
   - idp
   - sp
-version: 4.0.3
-appVersion: 2021.10.4
+version: 5.0.0
+appVersion: 2021.12.3
 icon: https://raw.githubusercontent.com/BeryJu/authentik/master/web/icons/icon.svg
 maintainers:
   - name: BeryJu
@@ -37,11 +37,13 @@ dependencies:
     condition: redis.enabled
   - name: common
     repository: https://library-charts.k8s-at-home.com
-    version: 2.4.0
+    version: 4.2.0
 annotations:
   artifacthub.io/changes: |
     - kind: changed
-      description: use authentik.outposts.container_image_base to align with upstream config
+      description: upgrade to authentik 2021.12.3
+    - kind: changed
+      description: upgrade to latest k8s-at-home common chart
   artifacthub.io/license: GPL-3.0-only
   artifacthub.io/links: |
     - name: Github
@@ -57,8 +59,8 @@ annotations:
       url: https://github.com/dirtycajunrice
   artifacthub.io/images: |
     - name: authentik
-      image: goauthentik.io/server:2021.10.4
+      image: ghcr.io/goauthentik/server:2021.12.3
     - name: authentik-outpost-proxy
-      image: goauthentik.io/proxy:2021.10.4
+      image: ghcr.io/goauthentik/proxy:2021.12.3
     - name: authentik-outpost-ldap
-      image: goauthentik.io/ldap:2021.10.4
+      image: ghcr.io/goauthentik/ldap:2021.12.3
diff --git a/charts/authentik/README.md b/charts/authentik/README.md
index f87e1f48..12bc8a38 100644
--- a/charts/authentik/README.md
+++ b/charts/authentik/README.md
@@ -6,8 +6,8 @@
 
 [![Join Discord](https://img.shields.io/discord/809154715984199690?label=Discord&style=for-the-badge)](https://goauthentik.io/discord)
 [![GitHub Workflow Status](https://img.shields.io/github/workflow/status/goauthentik/helm/Lint%20and%20Test%20Chart?label=cid&style=for-the-badge)](https://github.com/goauthentik/helm/actions/workflows/lint-test.yaml)
-![Version: 4.0.3](https://img.shields.io/badge/Version-4.0.3-informational?style=for-the-badge)
-![AppVersion: 2021.10.4](https://img.shields.io/badge/AppVersion-2021.10.4-informational?style=for-the-badge)
+![Version: 5.0.0](https://img.shields.io/badge/Version-5.0.0-informational?style=for-the-badge)
+![AppVersion: 2021.12.3](https://img.shields.io/badge/AppVersion-2021.12.3-informational?style=for-the-badge)
 
 authentik is an open-source Identity Provider focused on flexibility and versatility
 
@@ -58,7 +58,7 @@ redis:
 |------------|------|---------|
 | https://charts.bitnami.com/bitnami | postgresql | 10.9.5 |
 | https://charts.bitnami.com/bitnami | redis | 15.3.2 |
-| https://library-charts.k8s-at-home.com | common | 2.4.0 |
+| https://library-charts.k8s-at-home.com | common | 4.2.0 |
 
 ## Values
 
@@ -79,7 +79,7 @@ redis:
 | authentik.error_reporting.send_pii | bool | `false` | Send PII (Personally identifiable information) data to sentry |
 | authentik.geoip | string | `"/geoip/GeoLite2-City.mmdb"` | Path for the geoip database. If the file doesn't exist, GeoIP features are disabled. |
 | authentik.log_level | string | `"info"` | Log level for server and worker |
-| authentik.outposts.container_image_base | string | `"goauthentik.io/%(type)s:%(version)s"` | Template used for managed outposts. The following placeholders can be used %(type)s - the type of the outpost %(version)s - version of your authentik install %(build_hash)s - only for beta versions, the build hash of the image |
+| authentik.outposts.container_image_base | string | `"ghcr.io/goauthentik/%(type)s:%(version)s"` | Template used for managed outposts. The following placeholders can be used %(type)s - the type of the outpost %(version)s - version of your authentik install %(build_hash)s - only for beta versions, the build hash of the image |
 | authentik.postgresql.host | string | `{{ .Release.Name }}-postgresql` | set the postgresql hostname to talk to if unset and .Values.postgresql.enabled == true, will generate the default |
 | authentik.postgresql.name | string | `authentik` | postgresql Database name |
 | authentik.postgresql.password | string | `""` |  |
@@ -106,8 +106,8 @@ redis:
 | geoip.updateInterval | int | `8` | number of hours between update runs |
 | image.pullPolicy | string | `"IfNotPresent"` |  |
 | image.pullSecrets | list | `[]` |  |
-| image.repository | string | `"goauthentik.io/server"` |  |
-| image.tag | string | `"2021.10.4"` |  |
+| image.repository | string | `"ghcr.io/goauthentik/server"` |  |
+| image.tag | string | `"2021.12.3"` |  |
 | ingress.annotations | object | `{}` |  |
 | ingress.enabled | bool | `false` |  |
 | ingress.hosts[0].host | string | `"authentik.domain.tld"` |  |
diff --git a/charts/authentik/README.md.gotmpl b/charts/authentik/README.md.gotmpl
index 806a5d13..c63466b5 100644
--- a/charts/authentik/README.md.gotmpl
+++ b/charts/authentik/README.md.gotmpl
@@ -6,8 +6,8 @@
 
 [![Join Discord](https://img.shields.io/discord/809154715984199690?label=Discord&style=for-the-badge)](https://goauthentik.io/discord)
 [![GitHub Workflow Status](https://img.shields.io/github/workflow/status/goauthentik/helm/Lint%20and%20Test%20Chart?label=cid&style=for-the-badge)](https://github.com/goauthentik/helm/actions/workflows/lint-test.yaml)
-![Version: 4.0.3](https://img.shields.io/badge/Version-4.0.3-informational?style=for-the-badge)
-![AppVersion: 2021.10.4](https://img.shields.io/badge/AppVersion-2021.10.4-informational?style=for-the-badge)
+![Version: 5.0.0](https://img.shields.io/badge/Version-5.0.0-informational?style=for-the-badge)
+![AppVersion: 2021.12.3](https://img.shields.io/badge/AppVersion-2021.12.3-informational?style=for-the-badge)
 
 {{ template "chart.deprecationWarning" . }}
 
diff --git a/charts/authentik/ci/ct-values.yaml b/charts/authentik/ci/ct-values.yaml
index 398246bf..e324c420 100644
--- a/charts/authentik/ci/ct-values.yaml
+++ b/charts/authentik/ci/ct-values.yaml
@@ -4,8 +4,8 @@ worker:
   replicas: 1
 
 image:
-  repository: goauthentik.io/server
-  tag: 2021.10.4
+  repository: ghcr.io/goauthentik/server
+  tag: 2021.12.3
   pullPolicy: IfNotPresent
 
 ingress:
diff --git a/charts/authentik/values.yaml b/charts/authentik/values.yaml
index 15443ca9..4630fd15 100644
--- a/charts/authentik/values.yaml
+++ b/charts/authentik/values.yaml
@@ -6,8 +6,8 @@ worker:
   replicas: 1
 
 image:
-  repository: goauthentik.io/server
-  tag: 2021.10.4
+  repository: ghcr.io/goauthentik/server
+  tag: 2021.12.3
   pullPolicy: IfNotPresent
   pullSecrets: []
 
@@ -56,7 +56,7 @@ authentik:
     # %(type)s - the type of the outpost
     # %(version)s - version of your authentik install
     # %(build_hash)s - only for beta versions, the build hash of the image
-    container_image_base: goauthentik.io/%(type)s:%(version)s
+    container_image_base: ghcr.io/goauthentik/%(type)s:%(version)s
   error_reporting:
     # -- This sends anonymous usage-data, stack traces on errors and
     # performance data to sentry.beryju.org, and is fully opt-in