2023-05-31 19:45:08 +02:00
|
|
|
default_redirection_url: https://hub.bhasher.com
|
2023-04-12 21:57:59 +02:00
|
|
|
theme: dark
|
|
|
|
|
|
|
|
|
|
server:
|
|
|
|
|
host: 0.0.0.0
|
|
|
|
|
port: 9091
|
|
|
|
|
|
|
|
|
|
log:
|
|
|
|
|
level: info
|
|
|
|
|
|
|
|
|
|
totp:
|
|
|
|
|
disable: false
|
|
|
|
|
issuer: idp.bhasher.com
|
|
|
|
|
algorithm: sha256
|
|
|
|
|
digits: 6
|
|
|
|
|
period: 30
|
|
|
|
|
skew: 1
|
|
|
|
|
secret_size: 32
|
|
|
|
|
|
|
|
|
|
authentication_backend:
|
|
|
|
|
password_reset:
|
|
|
|
|
disable: false
|
|
|
|
|
refresh_interval: 5m
|
|
|
|
|
ldap:
|
|
|
|
|
user: cn=readonly,dc=bhasher,dc=com
|
|
|
|
|
implementation: custom
|
|
|
|
|
url: ldap://openldap
|
|
|
|
|
timeout: 5s
|
|
|
|
|
start_tls: false
|
|
|
|
|
base_dn: DC=bhasher,DC=com
|
|
|
|
|
username_attribute: uid
|
|
|
|
|
additional_users_dn: ou=users
|
|
|
|
|
users_filter: (&({username_attribute}={input})(objectClass=inetOrgPerson))
|
|
|
|
|
additional_groups_dn: ou=groups
|
|
|
|
|
groups_filter: (&(uniqueMember={dn})(objectClass=groupOfUniqueNames))
|
|
|
|
|
group_name_attribute: cn
|
|
|
|
|
mail_attribute: mail
|
|
|
|
|
display_name_attribute: cn
|
|
|
|
|
permit_referrals: false
|
|
|
|
|
|
|
|
|
|
access_control:
|
|
|
|
|
default_policy: deny
|
|
|
|
|
rules:
|
|
|
|
|
- domain: 'radarr.bhasher.com'
|
2023-04-15 23:23:10 +02:00
|
|
|
policy: one_factor
|
2023-04-12 21:57:59 +02:00
|
|
|
subject:
|
|
|
|
|
- "group:mediaserver"
|
|
|
|
|
- domain: 'sonarr.bhasher.com'
|
2023-04-15 23:23:10 +02:00
|
|
|
policy: one_factor
|
2023-04-12 21:57:59 +02:00
|
|
|
subject:
|
|
|
|
|
- "group:mediaserver"
|
|
|
|
|
- domain: 'jellyfin.bhasher.com'
|
2023-04-15 23:23:10 +02:00
|
|
|
policy: one_factor
|
2023-04-12 21:57:59 +02:00
|
|
|
subject:
|
|
|
|
|
- "group:mediaserver"
|
2023-04-28 23:29:02 +02:00
|
|
|
- domain: 'lum.bhasher.com'
|
|
|
|
|
policy: two_factor
|
|
|
|
|
subject:
|
|
|
|
|
- "group:admin"
|
|
|
|
|
- domain: '*.bhasher.com'
|
|
|
|
|
policy: one_factor
|
|
|
|
|
subject:
|
|
|
|
|
- "group:admin"
|
2023-04-12 21:57:59 +02:00
|
|
|
|
|
|
|
|
session:
|
|
|
|
|
name: auth_session
|
|
|
|
|
domain: bhasher.com
|
|
|
|
|
same_site: lax
|
|
|
|
|
expiration: 1d
|
|
|
|
|
inactivity: 3h
|
|
|
|
|
remember_me_duration: 1w
|
|
|
|
|
redis:
|
|
|
|
|
host: redis
|
|
|
|
|
port: 6379
|
|
|
|
|
|
|
|
|
|
regulation:
|
|
|
|
|
max_retries: 3
|
|
|
|
|
find_time: 1m
|
|
|
|
|
ban_time: 5m
|
|
|
|
|
|
|
|
|
|
storage:
|
|
|
|
|
# local:
|
|
|
|
|
# path: /data/db.sqlite3
|
|
|
|
|
postgres:
|
|
|
|
|
host: postgres
|
|
|
|
|
port: 5432
|
|
|
|
|
database: authelia
|
|
|
|
|
schema: public
|
|
|
|
|
username: postgres
|
|
|
|
|
|
|
|
|
|
notifier:
|
|
|
|
|
smtp:
|
|
|
|
|
host: bdubois.io
|
|
|
|
|
port: 587
|
|
|
|
|
sender: no-reply@bhasher.com
|
|
|
|
|
|
|
|
|
|
password_policy:
|
|
|
|
|
standard:
|
|
|
|
|
enabled: true
|
|
|
|
|
min_length: 8
|
|
|
|
|
max_length: 0
|
|
|
|
|
require_uppercase: false
|
|
|
|
|
require_lowercase: false
|
|
|
|
|
require_number: false
|
|
|
|
|
require_special: false
|
2023-04-15 23:23:10 +02:00
|
|
|
|
2023-04-28 23:29:02 +02:00
|
|
|
telemetry:
|
|
|
|
|
metrics:
|
|
|
|
|
enabled: true
|
|
|
|
|
address: "tcp://0.0.0.0:9959"
|
|
|
|
|
buffers:
|
|
|
|
|
read: 4096
|
|
|
|
|
write: 4096
|
|
|
|
|
timeouts:
|
|
|
|
|
read: 6s
|
|
|
|
|
write: 6s
|
|
|
|
|
idle: 30s
|
|
|
|
|
|
|
|
|
|
|
2023-04-15 23:23:10 +02:00
|
|
|
identity_providers:
|
|
|
|
|
oidc:
|
|
|
|
|
enforce_pkce: public_clients_only
|
|
|
|
|
clients:
|
|
|
|
|
- id: grafana
|
|
|
|
|
description: Grafana
|
|
|
|
|
secret: '$argon2id$v=19$m=65536,t=3,p=4$dQfNyInvlh1Lgw3JXi7G6A$M/WaNpHJkAyaQcXIMsOTl0+gBWGPPVBoCm7NpEQfTpI'
|
|
|
|
|
public: false
|
|
|
|
|
authorization_policy: one_factor
|
|
|
|
|
redirect_uris:
|
|
|
|
|
- https://grafana.bhasher.com/login/generic_oauth
|
2023-04-16 00:37:37 +02:00
|
|
|
consent_mode: implicit
|
2023-04-15 23:23:10 +02:00
|
|
|
scopes:
|
|
|
|
|
- openid
|
|
|
|
|
- profile
|
|
|
|
|
- groups
|
|
|
|
|
- email
|
|
|
|
|
userinfo_signing_algorithm: none
|
2023-04-16 00:22:52 +02:00
|
|
|
- id: matrix_synapse
|
|
|
|
|
description: Matrix Synapse
|
|
|
|
|
secret: '$argon2id$v=19$m=65536,t=3,p=4$Z+6HONrjDp54s+MhXuq1cA$bjc5tMGD3gR6AaBYIDx3S2mz/UfPv6a0n1Vf3q2Ifik'
|
|
|
|
|
public: false
|
|
|
|
|
authorization_policy: one_factor
|
|
|
|
|
redirect_uris:
|
|
|
|
|
- https://matrix.bhasher.com/_synapse/client/oidc/callback
|
2023-04-16 00:37:37 +02:00
|
|
|
consent_mode: implicit
|
2023-04-16 00:22:52 +02:00
|
|
|
scopes:
|
|
|
|
|
- openid
|
|
|
|
|
- profile
|
|
|
|
|
- email
|
|
|
|
|
userinfo_signing_algorithm: none
|
2023-04-16 00:37:37 +02:00
|
|
|
- id: portainer
|
|
|
|
|
description: Portainer
|
|
|
|
|
secret: '$argon2id$v=19$m=65536,t=3,p=4$7bqhx/sMH6Hes4ggVwpEPg$uue9QyGkROpAihkGpbDV6YjKCJlZVXj1JBkJfyLj2MI'
|
|
|
|
|
public: false
|
|
|
|
|
authorization_policy: two_factor
|
|
|
|
|
redirect_uris:
|
|
|
|
|
- https://portainer.bxl.bhasher.com
|
|
|
|
|
consent_mode: implicit
|
|
|
|
|
scopes:
|
|
|
|
|
- openid
|
|
|
|
|
- profile
|
|
|
|
|
- groups
|
|
|
|
|
- email
|
|
|
|
|
userinfo_signing_algorithm: none
|
