adding Authelia to dal14
This commit is contained in:
3
roles/authelia/templates/Caddyfile.j2
Normal file
3
roles/authelia/templates/Caddyfile.j2
Normal file
@@ -0,0 +1,3 @@
|
||||
auth.{{ authelia_domain }} {
|
||||
reverse_proxy authelia:{{ authelia_port }}
|
||||
}
|
||||
50
roles/authelia/templates/configuration.yml.j2
Normal file
50
roles/authelia/templates/configuration.yml.j2
Normal file
@@ -0,0 +1,50 @@
|
||||
theme: light
|
||||
default_2fa_method: totp
|
||||
|
||||
server:
|
||||
address: 'tcp://0.0.0.0:{{ authelia_port }}'
|
||||
|
||||
log:
|
||||
level: {{ authelia_log_level }}
|
||||
|
||||
totp:
|
||||
issuer: {{ authelia_domain }}
|
||||
|
||||
authentication_backend:
|
||||
file:
|
||||
path: /config/users_database.yml
|
||||
|
||||
access_control:
|
||||
default_policy: deny
|
||||
rules:
|
||||
- domain: "*.{{ authelia_domain }}"
|
||||
policy: two_factor
|
||||
|
||||
session:
|
||||
name: authelia_session
|
||||
domain: {{ authelia_domain }}
|
||||
expiration: 1h
|
||||
inactivity: 5m
|
||||
|
||||
regulation:
|
||||
max_retries: 3
|
||||
find_time: 2m
|
||||
ban_time: 5m
|
||||
|
||||
storage:
|
||||
local:
|
||||
path: /config/db.sqlite3
|
||||
|
||||
notifier:
|
||||
filesystem:
|
||||
filename: /config/notification.txt
|
||||
|
||||
identity_validation:
|
||||
reset_password:
|
||||
jwt_secret: "{{ authelia_jwt_secret }}"
|
||||
|
||||
session:
|
||||
secret: "{{ authelia_session_secret }}"
|
||||
|
||||
storage:
|
||||
encryption_key: "{{ authelia_storage_encryption_key }}"
|
||||
31
roles/authelia/templates/docker-compose.yml.j2
Normal file
31
roles/authelia/templates/docker-compose.yml.j2
Normal file
@@ -0,0 +1,31 @@
|
||||
services:
|
||||
authelia:
|
||||
image: {{ authelia_image }}
|
||||
container_name: {{ authelia_container_name }}
|
||||
restart: unless-stopped
|
||||
volumes:
|
||||
- {{ authelia_config_dir }}:/config
|
||||
networks:
|
||||
- authelia_net
|
||||
expose:
|
||||
- "{{ authelia_port }}"
|
||||
environment:
|
||||
- TZ={{ ansible_facts.timezone | default('UTC') }}
|
||||
|
||||
caddy:
|
||||
image: caddy:2
|
||||
container_name: authelia_caddy
|
||||
restart: unless-stopped
|
||||
ports:
|
||||
- "80:80"
|
||||
- "443:443"
|
||||
volumes:
|
||||
- {{ authelia_base_dir }}/Caddyfile:/etc/caddy/Caddyfile
|
||||
- {{ authelia_data_dir }}/caddy_data:/data
|
||||
- {{ authelia_data_dir }}/caddy_config:/config
|
||||
networks:
|
||||
- authelia_net
|
||||
|
||||
networks:
|
||||
authelia_net:
|
||||
driver: bridge
|
||||
Reference in New Issue
Block a user