initial authelia config

authelia/compose.yml

@@ -0,0 +1,31 @@
+services:
+  authelia:
+    image: 'authelia/authelia'
+    container_name: 'authelia'
+    volumes:
+      - './config:/config'
+    networks:
+      - authelia
+      - reverseproxy
+    restart: 'unless-stopped'
+    healthcheck:
+      disable: true
+    environment:
+      TZ: 'America/Chicago'
+
+  redis:
+    image: 'redis:alpine'
+    container_name: 'redis'
+    volumes:
+      - './redis:/data'
+    networks:
+      - authelia
+    restart: 'unless-stopped'
+    environment:
+      TZ: 'America/Chicago'
+
+networks:
+  authelia:
+    name: authelia
+  reverseproxy:
+    external: true

authelia/config/configuration.yml

@@ -0,0 +1,65 @@
+---
+###############################################################
+#                   Authelia configuration                    #
+###############################################################
+
+server:
+  address: 'tcp://:9091'
+
+log:
+  level: 'debug'
+
+totp:
+  issuer: 'authelia.com'
+
+identity_validation:
+  reset_password:
+    jwt_secret: '2b8a78f3ac1784ef6aab3899c663e1010c60d3a9de694550879da349fe222923'
+
+authentication_backend:
+  file:
+    path: '/config/users_database.yml'
+
+access_control:
+  default_policy: 'deny'
+  rules:
+    # Rules applied to everyone
+    - domain: 'public.example.com'
+      policy: 'bypass'
+    - domain: 'traefik.example.com'
+      policy: 'one_factor'
+    - domain: 'secure.example.com'
+      policy: 'two_factor'
+
+session:
+  secret: 'ffc343d98b87910edcddb1f0dac4b492b62e29b5eafa92f1c213f37c4669f243'
+
+  cookies:
+    - name: 'authelia_session'
+      domain: 'akanealw.com'
+      authelia_url: 'https://auth.akanealw.com'
+      expiration: '1 hour'
+      inactivity: '5 minutes'
+
+  redis:
+    host: 'redis'
+    port: 6379
+    password: 'bc4eb8df73776ba7716aeb60c0023ef6136b80680bb8ea1cf6c51a326dea2c43'
+
+regulation:
+  max_retries: 3
+  find_time: '2 minutes'
+  ban_time: '5 minutes'
+
+storage:
+  encryption_key: 'cbd7570c1795cba61f05baf419b7cee23fa144d512bda2ea57ba300afa6b33bf'
+  local:
+    path: '/config/db.sqlite3'
+
+notifier:
+  smtp:
+    username: 'akanealw@gmail.com'
+    password: 'qlvmffuzpscltdgz'
+    address: 'smtp://smtp.gmail.com:587'
+    sender: 'akanealw@gmail.com'
+  

authelia/config/users_database.yml

@@ -0,0 +1,16 @@
+###############################################################
+#                         Users Database                      #
+###############################################################
+
+# This file can be used if you do not have an LDAP set up.
+
+# List of users
+users:
+  akanealw:
+    disabled: false
+    displayname: 'akanealw'
+    password: '$argon2id$v=19$m=65536,t=3,p=4$OdUFS5B8+7p5cuaE7TJ1Ig$fiMUt1PjTo65xltKyDfcwiu1yOPlO3G2X04CZCQFWig'
+    email: 'akanealw@gmail.com'
+    groups:
+      - 'admins'
+      - 'dev'