updating the rest of the cojnfig from 1Y to 12M

README.md

@@ -80,4 +80,4 @@ ansible-playbook site.yml --limit vps1 -u root --ask-pass
 ```
 
 After that first run creates `deploy_user` and installs your SSH key,
-subsequent runs will use `deploy_user` automatically via `ansible.cfg`.
+subsequent runs will use `deploy_user` automatically via `ansible.cfg`. 

roles/authelia/templates/Caddyfile.j2

@@ -20,7 +20,6 @@ semaphore.frantecrt.duckdns.org {
 
 git.frantecrt.duckdns.org {
     # Import the auth configuration block
-    import authelia_auth
 
     # Route the traffic to your backend application if authenticated
     reverse_proxy gitea.netbird.cloud:3000
@@ -37,4 +36,20 @@ vault.frantecrt.duckdns.org {
     reverse_proxy wikijs.netbird.cloud:8080
     reverse_proxy /notifications/hub* wikijs.netbird.cloud:3012
     reverse_proxy /notifications/anonymous_hub* wikijs.netbird.cloud:3012
+}
+
+slskd.frantecrt.duckdns.org {
+    # Import the auth configuration block
+    import authelia_auth
+
+    # Route the traffic to your backend application if authenticated
+    reverse_proxy navidrome.netbird.cloud:5030
+}
+
+navidrome.frantecrt.duckdns.org {
+    # Import the auth configuration block
+    import authelia_auth
+
+    # Route the traffic to your backend application if authenticated
+    reverse_proxy navidrome.netbird.cloud:4533
 }

roles/authelia/templates/configuration.yml.j2

@@ -64,6 +64,14 @@ identity_providers:
           - alt_emails
           - preferred_username
           - name
+      wikijs_claims_policy:
+        id_token:
+          - groups
+          - email
+          - email_verified
+          - alt_emails
+          - preferred_username
+          - name
     clients:
       - client_id: semaphore
         client_name: Semaphore
@@ -71,6 +79,8 @@ identity_providers:
         claims_policy: semaphore_claims_policy
         public: false
         authorization_policy: two_factor
+        consent_mode: 'pre-configured'
+        pre_configured_consent_duration: '12M' # Reask consent for data share 1 year after first login
         redirect_uris:
           - https://semaphore.{{ authelia_domain }}/api/auth/oidc/authelia/redirect
         scopes:
@@ -81,16 +91,20 @@ identity_providers:
       - client_id: wikijs
         client_name: Wiki
         client_secret: {{ wikijs_client_secret }}
+        claims_policy: wikijs_claims_policy
         public: false
-        authorization_policy: 'two_factor'
+        authorization_policy: two_factor
+        consent_mode: 'pre-configured'
+        pre_configured_consent_duration: '12M' # Reask consent for data share 1 year after first login
         require_pkce: false
         pkce_challenge_method: ''
         redirect_uris:
           - 'https://wikijs.{{ authelia_domain }}/login/{{ wikijs_uuid }}/callback'  # Note this must be copied during step 7 of the Application configuration.
         scopes:
-          - 'openid'
+          - openid
-          - 'profile'
+          - profile
-          - 'email'
+          - email
+          - groups
         response_types:
           - 'code'
         grant_types:

roles/authelia/templates/docker-compose.yml.j2

@@ -16,6 +16,7 @@ services:
     restart: unless-stopped
     network_mode: host
     volumes:
+      - /etc/resolv.conf:/etc/resolv.conf:ro
       - {{ authelia_base_dir }}/Caddyfile:/etc/caddy/Caddyfile
       - {{ authelia_data_dir }}/caddy_data:/data
       - {{ authelia_data_dir }}/caddy_config:/config