830 B
830 B
Server
Configuration for traefik 2 and authelia
Authelia preprocessor
The authelia configuration contains some sensitive values, but authelia cannot read them from env variables like traefic can.
Instead, a special service - authelia-config
runs before authelia start, and preprocesses the configuration file.
- Local file
./authelia/configuration.yaml
is mapped to/data/input
inauthelia-config
- Volume
authelia-config
is mapped to/data/output
inauthelia-config
authelia-config
runsgomplate
on/data/input
and saves todata/output/configuration.yaml
Volume
authelia-configis mapped to
/etc/autheliain
authelia`, where it reads its configuration
Lessons learned
- Authelia will ONLY work with https. Both the authelia url itself and the one being authenticated must be https.