112 lines
2.5 KiB
YAML
Executable File
112 lines
2.5 KiB
YAML
Executable File
---
|
|
###############################################################
|
|
# Authelia configuration #
|
|
###############################################################
|
|
|
|
theme: dark
|
|
|
|
server:
|
|
address: 'tcp://:9091'
|
|
endpoints:
|
|
authz:
|
|
forward-auth:
|
|
implementation: 'ForwardAuth'
|
|
|
|
log:
|
|
level: 'info'
|
|
format: 'text'
|
|
file_path: '/etc/authelia/authelia.log'
|
|
keep_stdout: false
|
|
|
|
totp:
|
|
issuer: 'authelia.com'
|
|
|
|
identity_validation:
|
|
reset_password:
|
|
jwt_secret: '2b8a78f3ac1784ef6aab3899c663e1010c60d3a9de694550879da349fe222923'
|
|
|
|
authentication_backend:
|
|
file:
|
|
path: '/etc/authelia/users_database.yml'
|
|
|
|
access_control:
|
|
default_policy: deny
|
|
networks:
|
|
- name: internal
|
|
networks:
|
|
- '10.0.0.0/8'
|
|
- '172.16.0.0/12'
|
|
- '192.168.0.0/16'
|
|
rules:
|
|
# bypass all domains and subdomains from local ips
|
|
- domain:
|
|
- 'aknlw.com'
|
|
- 'akanealw.com'
|
|
- '*.akanealw.com'
|
|
networks:
|
|
- 'internal'
|
|
policy: bypass
|
|
# bypass api for subdomains
|
|
- domain:
|
|
- '*.akanealw.com'
|
|
resources:
|
|
- '^/api([/?].*)?$'
|
|
- '^/add([/?].*)?$'
|
|
- '^/public([/?].*)?$'
|
|
policy: bypass
|
|
# bypass specific subdomains
|
|
- domain:
|
|
- 'aknlw.com'
|
|
- 'bitwarden.akanealw.com'
|
|
- 'gitea.akanealw.com'
|
|
- 'nextcloud.akanealw.com'
|
|
policy: bypass
|
|
# bypass filebrowser shares
|
|
- domain:
|
|
- 'filebrowser.akanealw.com'
|
|
resources:
|
|
- '^/api([/?].*)?$'
|
|
- '^/share([/?].*)?$'
|
|
- '^/static([/?].*)?$'
|
|
policy: bypass
|
|
# two_factor subdomains
|
|
- domain:
|
|
- 'akanealw.com'
|
|
- '*.akanealw.com'
|
|
policy: two_factor
|
|
|
|
session:
|
|
secret: 'ffc343d98b87910edcddb1f0dac4b492b62e29b5eafa92f1c213f37c4669f243'
|
|
|
|
cookies:
|
|
- name: 'authelia_session'
|
|
domain: 'akanealw.com'
|
|
authelia_url: 'https://auth.akanealw.com'
|
|
default_redirection_url: 'https://akanealw.com'
|
|
expiration: '1 hour'
|
|
inactivity: '5 minutes'
|
|
|
|
regulation:
|
|
max_retries: 3
|
|
find_time: '2 minutes'
|
|
ban_time: '5 minutes'
|
|
|
|
storage:
|
|
encryption_key: 'cbd7570c1795cba61f05baf419b7cee23fa144d512bda2ea57ba300afa6b33bf'
|
|
local:
|
|
path: '/etc/authelia/db.sqlite3'
|
|
|
|
notifier:
|
|
smtp:
|
|
username: 'akanealw@gmail.com'
|
|
password: 'qlvmffuzpscltdgz'
|
|
address: 'smtp://smtp.gmail.com:587'
|
|
sender: 'akanealw@gmail.com'
|
|
|
|
ntp:
|
|
address: 'udp://time.windows.com:123'
|
|
version: 3
|
|
max_desync: '3s'
|
|
disable_startup_check: false
|
|
disable_failure: false
|