diff --git a/authelia/compose.yml b/authelia/compose.yml new file mode 100644 index 0000000..69bc56b --- /dev/null +++ b/authelia/compose.yml @@ -0,0 +1,31 @@ +services: + authelia: + image: 'authelia/authelia' + container_name: 'authelia' + volumes: + - './config:/config' + networks: + - authelia + - reverseproxy + restart: 'unless-stopped' + healthcheck: + disable: true + environment: + TZ: 'America/Chicago' + + redis: + image: 'redis:alpine' + container_name: 'redis' + volumes: + - './redis:/data' + networks: + - authelia + restart: 'unless-stopped' + environment: + TZ: 'America/Chicago' + +networks: + authelia: + name: authelia + reverseproxy: + external: true diff --git a/authelia/config/configuration.yml b/authelia/config/configuration.yml new file mode 100644 index 0000000..26fd5dd --- /dev/null +++ b/authelia/config/configuration.yml @@ -0,0 +1,65 @@ +--- +############################################################### +# Authelia configuration # +############################################################### + +server: + address: 'tcp://:9091' + +log: + level: 'debug' + +totp: + issuer: 'authelia.com' + +identity_validation: + reset_password: + jwt_secret: '2b8a78f3ac1784ef6aab3899c663e1010c60d3a9de694550879da349fe222923' + +authentication_backend: + file: + path: '/config/users_database.yml' + +access_control: + default_policy: 'deny' + rules: + # Rules applied to everyone + - domain: 'public.example.com' + policy: 'bypass' + - domain: 'traefik.example.com' + policy: 'one_factor' + - domain: 'secure.example.com' + policy: 'two_factor' + +session: + secret: 'ffc343d98b87910edcddb1f0dac4b492b62e29b5eafa92f1c213f37c4669f243' + + cookies: + - name: 'authelia_session' + domain: 'akanealw.com' + authelia_url: 'https://auth.akanealw.com' + expiration: '1 hour' + inactivity: '5 minutes' + + redis: + host: 'redis' + port: 6379 + password: 'bc4eb8df73776ba7716aeb60c0023ef6136b80680bb8ea1cf6c51a326dea2c43' + +regulation: + max_retries: 3 + find_time: '2 minutes' + ban_time: '5 minutes' + +storage: + encryption_key: 'cbd7570c1795cba61f05baf419b7cee23fa144d512bda2ea57ba300afa6b33bf' + local: + path: '/config/db.sqlite3' + +notifier: + smtp: + username: 'akanealw@gmail.com' + password: 'qlvmffuzpscltdgz' + address: 'smtp://smtp.gmail.com:587' + sender: 'akanealw@gmail.com' + \ No newline at end of file diff --git a/authelia/config/users_database.yml b/authelia/config/users_database.yml new file mode 100644 index 0000000..c92a691 --- /dev/null +++ b/authelia/config/users_database.yml @@ -0,0 +1,16 @@ +############################################################### +# Users Database # +############################################################### + +# This file can be used if you do not have an LDAP set up. + +# List of users +users: + akanealw: + disabled: false + displayname: 'akanealw' + password: '$argon2id$v=19$m=65536,t=3,p=4$OdUFS5B8+7p5cuaE7TJ1Ig$fiMUt1PjTo65xltKyDfcwiu1yOPlO3G2X04CZCQFWig' + email: 'akanealw@gmail.com' + groups: + - 'admins' + - 'dev'