authelia/configuration.yml

@@ -11,7 +11,7 @@ session:
   name: authelia_session
   secret: {{ env.Getenv "PRIVATE_DOMAIN" }}-token-secret
   domain: {{ env.Getenv "PRIVATE_DOMAIN" }}
-  expiration: 604800
+  expiration: 3600
   inactivity: 300
 
 storage:
@@ -22,19 +22,13 @@ totp:
   issuer: {{ env.Getenv "PRIVATE_DOMAIN" }}
 
 access_control:
-  default_policy: two_factor
+  default_policy: one_factor
-
-  rules:
-    - domain: "*"
-      networks:
-        - 192.168.1.0/23
-      policy: bypass
 
 
 regulation:
-  max_retries: 5
+  max_retries: 1000
   find_time: 120
-  ban_time: 180
+  ban_time: 300
 
 notifier:
   filesystem:

traefik/tls.yaml

@@ -17,84 +17,12 @@ http:
       loadBalancer:
         servers:
           - url: http://192.168.0.10:8123
-    plex:
-      loadBalancer:
-        servers:
-          - url: http://192.168.0.10:32400
-    portainer:
-      loadBalancer:
-        servers:
-          - url: http://192.168.0.10:9000
-    deconz:
-      loadBalancer:
-        servers:
-          - url: http://192.168.0.10:8082
-    proxmox:
-      loadBalancer:
-        servers:
-          - url: http://192.168.0.10:8006
-    nextcloud:
-      loadBalancer:
-        servers:
-          - url: http://192.168.0.10:8083
-      # client_max_body_size 10G
-      # client_body_buffer_size 400M
-      # proxy_hide_header Content-Security-Policy
-      # proxy_hide_header X-Frame-Options
-    keeweb:
-      loadBalancer:
-        servers:
-          - url: http://192.168.0.10:8084
-    grafana:
-      loadBalancer:
-        servers:
-          - url: http://192.168.0.10:3000
 
   routers:
     hass:
       service: hass
       rule: Host(`avagen.{{ env "PRIVATE_DOMAIN" }}`)
-      tls:
+      middleware: redir
-        certResolver: le
-    plex:
-      service: plex
-      rule: Host(`plex.{{ env "PRIVATE_DOMAIN" }}`)
-      tls:
-        certResolver: le
-    portainer:
-      service: portainer
-      rule: Host(`portainer.{{ env "PRIVATE_DOMAIN" }}`)
-      middlewares:
-        - auth
-      tls:
-        certResolver: le
-    deconz:
-      service: deconz
-      rule: Host(`deconz.{{ env "PRIVATE_DOMAIN" }}`)
-      middlewares:
-        - auth
-      tls:
-        certResolver: le
-    proxmox:
-      service: proxmox
-      rule: Host(`proxmox.{{ env "PRIVATE_DOMAIN" }}`)
-      middlewares:
-        - auth
-      tls:
-        certResolver: le
-    cloud:
-      service: nextcloud
-      rule: Host(`cloud.{{ env "PRIVATE_DOMAIN" }}`)
-      tls:
-        certResolver: le
-    pwd:
-      service: keeweb
-      rule: Host(`pwd.{{ env "PRIVATE_DOMAIN" }}`)
-      tls:
-        certResolver: le
-    grafana:
-      service: grafana
-      rule: Host(`grafana.{{ env "PRIVATE_DOMAIN" }}`)
       tls:
         certResolver: le