Add Security_Containers/authelia/config.yaml

2026-09-13 04:41:24 +00:00
parent 8b25504ccf
commit 0c493d2191
1 changed files with 61 additions and 0 deletions
@@ -0,0 +1,61 @@
+---
+theme: dark
+
+server:
+  address: 'tcp://:9091'
+
+log:
+  level: info
+
+totp:
+  issuer: '${DOMAIN_NAME}'
+
+authentication_backend:
+  file:
+    path: /config/users_database.yml
+    password:
+      algorithm: argon2
+      argon2:
+        variant: argon2id
+        iterations: 3
+        memory: 65536
+        parallelism: 4
+        key_length: 32
+        salt_length: 16
+
+access_control:
+  default_policy: deny
+  rules:
+    # Authelia's own portal must be reachable without auth or you'll lock yourself out
+    - domain: 'auth.${DOMAIN_NAME}'
+      policy: bypass
+    # Everything else behind the forwardauth middleware requires 2FA by default
+    - domain: '*.${DOMAIN_NAME}'
+      policy: two_factor
+
+session:
+  name: authelia_session
+  same_site: lax
+  expiration: 1h
+  inactivity: 5m
+  remember_me: 1M
+  cookies:
+    - domain: '${DOMAIN_NAME}'
+      authelia_url: 'https://auth.${DOMAIN_NAME}'
+      default_redirection_url: 'https://${DOMAIN_NAME}'
+
+regulation:
+  max_retries: 3
+  find_time: 2m
+  ban_time: 15m
+
+storage:
+  local:
+    path: /config/db.sqlite3
+
+notifier:
+  # No SMTP configured yet - password reset notifications just get written to this
+  # file instead of emailed. Switch to an `smtp:` block once you have a mail relay
+  # if you want real password-reset emails.
+  filesystem:
+    filename: /config/notification.txt