homelab/bxl-rpi/config/idp/authelia.configuration.yaml

165 lines
3.5 KiB
YAML
Raw Normal View History

2023-05-31 19:45:08 +02:00
default_redirection_url: https://hub.bhasher.com
2023-04-12 21:57:59 +02:00
theme: dark
server:
host: 0.0.0.0
port: 9091
log:
level: info
totp:
disable: false
issuer: idp.bhasher.com
algorithm: sha256
digits: 6
period: 30
skew: 1
secret_size: 32
authentication_backend:
password_reset:
disable: false
refresh_interval: 5m
ldap:
user: cn=readonly,dc=bhasher,dc=com
implementation: custom
url: ldap://openldap
timeout: 5s
start_tls: false
base_dn: DC=bhasher,DC=com
username_attribute: uid
additional_users_dn: ou=users
users_filter: (&({username_attribute}={input})(objectClass=inetOrgPerson))
additional_groups_dn: ou=groups
groups_filter: (&(uniqueMember={dn})(objectClass=groupOfUniqueNames))
group_name_attribute: cn
mail_attribute: mail
display_name_attribute: cn
permit_referrals: false
access_control:
default_policy: deny
rules:
- domain: 'radarr.bhasher.com'
2023-04-15 23:23:10 +02:00
policy: one_factor
2023-04-12 21:57:59 +02:00
subject:
- "group:mediaserver"
- domain: 'sonarr.bhasher.com'
2023-04-15 23:23:10 +02:00
policy: one_factor
2023-04-12 21:57:59 +02:00
subject:
- "group:mediaserver"
- domain: 'jellyfin.bhasher.com'
2023-04-15 23:23:10 +02:00
policy: one_factor
2023-04-12 21:57:59 +02:00
subject:
- "group:mediaserver"
2023-04-28 23:29:02 +02:00
- domain: 'lum.bhasher.com'
policy: two_factor
subject:
- "group:admin"
- domain: '*.bhasher.com'
policy: one_factor
subject:
- "group:admin"
2023-04-12 21:57:59 +02:00
session:
name: auth_session
domain: bhasher.com
same_site: lax
expiration: 1d
inactivity: 3h
remember_me_duration: 1w
redis:
host: redis
port: 6379
regulation:
max_retries: 3
find_time: 1m
ban_time: 5m
storage:
# local:
# path: /data/db.sqlite3
postgres:
host: postgres
port: 5432
database: authelia
schema: public
username: postgres
notifier:
smtp:
host: bdubois.io
port: 587
sender: no-reply@bhasher.com
password_policy:
standard:
enabled: true
min_length: 8
max_length: 0
require_uppercase: false
require_lowercase: false
require_number: false
require_special: false
2023-04-15 23:23:10 +02:00
2023-04-28 23:29:02 +02:00
telemetry:
metrics:
enabled: true
address: "tcp://0.0.0.0:9959"
buffers:
read: 4096
write: 4096
timeouts:
read: 6s
write: 6s
idle: 30s
2023-04-15 23:23:10 +02:00
identity_providers:
oidc:
enforce_pkce: public_clients_only
clients:
- id: grafana
description: Grafana
secret: '$argon2id$v=19$m=65536,t=3,p=4$dQfNyInvlh1Lgw3JXi7G6A$M/WaNpHJkAyaQcXIMsOTl0+gBWGPPVBoCm7NpEQfTpI'
public: false
authorization_policy: one_factor
redirect_uris:
- https://grafana.bhasher.com/login/generic_oauth
2023-04-16 00:37:37 +02:00
consent_mode: implicit
2023-04-15 23:23:10 +02:00
scopes:
- openid
- profile
- groups
- email
userinfo_signing_algorithm: none
2023-04-16 00:22:52 +02:00
- id: matrix_synapse
description: Matrix Synapse
secret: '$argon2id$v=19$m=65536,t=3,p=4$Z+6HONrjDp54s+MhXuq1cA$bjc5tMGD3gR6AaBYIDx3S2mz/UfPv6a0n1Vf3q2Ifik'
public: false
authorization_policy: one_factor
redirect_uris:
- https://matrix.bhasher.com/_synapse/client/oidc/callback
2023-04-16 00:37:37 +02:00
consent_mode: implicit
2023-04-16 00:22:52 +02:00
scopes:
- openid
- profile
- email
userinfo_signing_algorithm: none
2023-04-16 00:37:37 +02:00
- id: portainer
description: Portainer
secret: '$argon2id$v=19$m=65536,t=3,p=4$7bqhx/sMH6Hes4ggVwpEPg$uue9QyGkROpAihkGpbDV6YjKCJlZVXj1JBkJfyLj2MI'
public: false
authorization_policy: two_factor
redirect_uris:
- https://portainer.bxl.bhasher.com
consent_mode: implicit
scopes:
- openid
- profile
- groups
- email
userinfo_signing_algorithm: none