Bhasher/homelab
Bhasher
/
homelab
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Paperless SSO

This commit is contained in:
Brieuc Dubois 2024-06-30 11:41:41 +02:00
parent 165f88595c
commit b80d5c0acf
2 changed files with 17 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
bxl-shp/apps/docker-compose.paperless.yaml
View File

@ -23,12 +23,13 @@ services:
- PAPERLESS_SECRET_KEY=${PAPERLESS_SECRET_KEY} - PAPERLESS_SECRET_KEY=${PAPERLESS_SECRET_KEY}
- PAPERLESS_TIME_ZONE=Europe/Paris - PAPERLESS_TIME_ZONE=Europe/Paris
- PAPERLESS_OCR_LANGUAGE=fra - PAPERLESS_OCR_LANGUAGE=fra
- PAPERLESS_ENABLE_HTTP_REMOTE_USER=true
- PAPERLESS_USE_X_FORWARD_HOST=true - PAPERLESS_USE_X_FORWARD_HOST=true
- PAPERLESS_USE_X_FORWARD_PORT=true - PAPERLESS_USE_X_FORWARD_PORT=true
- PAPERLESS_PROXY_SSL_HEADER=["HTTP_X_FORWARDED_PROTO", "https"] - PAPERLESS_PROXY_SSL_HEADER=["HTTP_X_FORWARDED_PROTO", "https"]
- PAPERLESS_TASK_WORKERS=4 - PAPERLESS_TASK_WORKERS=4
- PAPERLESS_SOCIALACCOUNT_PROVIDERS=${PAPERLESS_PROVIDERS}
- PAPERLESS_APPS=allauth.socialaccount.providers.openid_connect
- PAPERLESS_DISABLE_REGULAR_LOGIN=true
labels: labels:
- "traefik.enable=true" - "traefik.enable=true"
- "traefik.http.routers.paperless.rule=Host(`paperless.bhasher.com`)" - "traefik.http.routers.paperless.rule=Host(`paperless.bhasher.com`)"
@ -36,7 +37,6 @@ services:
- "traefik.http.services.paperless.loadbalancer.server.port=8000" - "traefik.http.services.paperless.loadbalancer.server.port=8000"
- "traefik.http.routers.paperless.tls=true" - "traefik.http.routers.paperless.tls=true"
- "traefik.http.routers.paperless.tls.certresolver=http" - "traefik.http.routers.paperless.tls.certresolver=http"
- "traefik.http.routers.paperless.middlewares=authelia@docker"
networks: networks:
- auth - auth
- storage - storage

15
bxl-shp/config/idp/authelia.configuration.yaml
View File

@ -261,7 +261,6 @@ identity_providers:
- email - email
- groups - groups
userinfo_signing_algorithm: none userinfo_signing_algorithm: none
- id: mealie - id: mealie
description: Mealie description: Mealie
public: true public: true
@ -276,4 +275,18 @@ identity_providers:
- email - email
- groups - groups
userinfo_signing_algorithm: none userinfo_signing_algorithm: none
- id: paperless-ngx
description: Paperless NGX
secret: '$argon2id$v=19$m=65536,t=3,p=4$kujFSqxNtfP0neWECtdwoQ$bmEqT9v47rXXKEDtLWiZO10VH7yGgNPRjflM/UWwCXg'
public: false
authorization_policy: two_factor
redirect_uris:
- https://paperless.bhasher.com/accounts/oidc/authelia/login/callback/
consent_mode: implicit
scopes:
- openid
- profile
- email
- groups
userinfo_signing_algorithm: none