Simplify authelia config. Add dozzle for log viewing.
This commit is contained in:
@@ -1,42 +1,38 @@
|
||||
host: 0.0.0.0
|
||||
port: 9091
|
||||
logs_level: trace
|
||||
jwt_secret: {{ env.Getenv "PRIVATE_DOMAIN" }}-jwt-secret
|
||||
# log:
|
||||
# level: debug
|
||||
|
||||
theme: auto
|
||||
authentication_backend:
|
||||
file:
|
||||
path: /opt/authelia/users_database.yml
|
||||
path: /config/users_database.yml
|
||||
|
||||
session:
|
||||
name: authelia_session
|
||||
secret: {{ env.Getenv "PRIVATE_DOMAIN" }}-token-secret
|
||||
domain: {{ env.Getenv "PRIVATE_DOMAIN" }}
|
||||
expiration: 604800
|
||||
inactivity: 172800
|
||||
# domain: SET BY ENV VARIABLE AUTHELIA_SESSION_DOMAIN
|
||||
# secret: SET BY ENV VARIABLE AUTHELIA_SESSION_SECRET
|
||||
|
||||
storage:
|
||||
local:
|
||||
path: /opt/authelia/db.sqlite3
|
||||
|
||||
totp:
|
||||
issuer: {{ env.Getenv "PRIVATE_DOMAIN" }}
|
||||
path: /config/db.sqlite3
|
||||
|
||||
access_control:
|
||||
default_policy: one_factor
|
||||
default_policy: two_factor
|
||||
networks:
|
||||
- name: internal
|
||||
networks:
|
||||
- 10.0.0.0/8
|
||||
- 172.16.0.0/12
|
||||
- 192.168.0.0/18
|
||||
|
||||
rules:
|
||||
# Allow free access from local network
|
||||
- domain: "*"
|
||||
- domain:
|
||||
- "*.se"
|
||||
- "*.com"
|
||||
networks:
|
||||
- 192.168.1.0/23
|
||||
- internal
|
||||
policy: bypass
|
||||
|
||||
|
||||
regulation:
|
||||
max_retries: 5
|
||||
find_time: 120
|
||||
ban_time: 180
|
||||
|
||||
notifier:
|
||||
filesystem:
|
||||
filename: /opt/authelia/notification.txt
|
||||
filename: /config/notification.txt
|
||||
|
||||
|
||||
Reference in New Issue
Block a user