Nixius
/
authelia
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

update
ci/woodpecker/push/woodpecker Pipeline was successful Details

This commit is contained in:
Colin 2024-04-07 20:23:43 -04:00
parent 7698af2a7f
commit f15b36d234
1 changed files with 24 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

38
stack.production.yml
View File

@ -61,22 +61,32 @@ services:
- node.hostname == ingress.nixc.us
# - node.labels.mac-rack == true
labels:
- "us.nixc.autodeploy=true"
- 'traefik.enable=true'
- 'traefik.http.routers.authelia_authelia.tls=true'
- "traefik.http.services.authelia_authelia.loadbalancer.server.port=9091"
- 'traefik.http.routers.authelia_authelia.rule=Host(`login.nixc.us`)'
- 'traefik.http.routers.authelia_authelia.entrypoints=websecure'
- "traefik.http.routers.authelia_authelia.tls.certresolver=letsencryptresolver"
- "traefik.http.routers.authelia_authelia.service=authelia_authelia"
- "traefik.docker.network=traefik"
- 'traefik.http.routers.authelia.rule=Host(`auth.example.com`)'
- 'traefik.http.routers.authelia.entryPoints=https'
- 'traefik.http.routers.authelia.tls=true'
- 'traefik.http.middlewares.authelia.forwardAuth.address=http://authelia_authelia:9091/api/authz/forward-auth'
## The following commented line is for configuring the Authelia URL in the proxy. We strongly suggest this is
## configured in the Session Cookies section of the Authelia configuration.
# - 'traefik.http.middlewares.authelia.forwardAuth.address=http://authelia:9091/api/authz/forward-auth?authelia_url=https%3A%2F%2Fauth.example.com%2F'
- 'traefik.http.middlewares.authelia.forwardAuth.trustForwardHeader=true'
- 'traefik.http.middlewares.authelia.forwardAuth.authResponseHeaders=Remote-User,Remote-Groups,Remote-Email,Remote-Name'
# - "us.nixc.autodeploy=true"
# - 'traefik.enable=true'
# - 'traefik.http.routers.authelia_authelia.tls=true'
# - "traefik.http.services.authelia_authelia.loadbalancer.server.port=9091"
# - 'traefik.http.routers.authelia_authelia.rule=Host(`login.nixc.us`)'
# - 'traefik.http.routers.authelia_authelia.entrypoints=websecure'
# - "traefik.http.routers.authelia_authelia.tls.certresolver=letsencryptresolver"
# - "traefik.http.routers.authelia_authelia.service=authelia_authelia"
# - "traefik.docker.network=traefik"
# # ## Authelia recommendations
- 'traefik.http.middlewares.authelia_authelia.forwardauth.address=http://authelia_authelia:9091/api/verify?rd=https://login.nixc.us/'
- 'traefik.http.middlewares.authelia_authelia.forwardauth.trustForwardHeader=true'
- 'traefik.http.middlewares.authelia_authelia.forwardauth.authResponseHeaders=Remote-User, Remote-Groups, Remote-Name, Remote-Email'
- 'traefik.http.middlewares.authelia-basic.forwardauth.address=http://authelia_authelia:9091/api/verify?auth=basic'
- 'traefik.http.middlewares.authelia-basic.forwardauth.trustForwardHeader=true'
- 'traefik.http.middlewares.authelia-basic.forwardauth.authResponseHeaders=Remote-User, Remote-Groups, Remote-Name, Remote-Email'
# - 'traefik.http.middlewares.authelia_authelia.forwardauth.address=http://authelia_authelia:9091/api/verify?rd=https://login.nixc.us/'
# - 'traefik.http.middlewares.authelia_authelia.forwardauth.trustForwardHeader=true'
# - 'traefik.http.middlewares.authelia_authelia.forwardauth.authResponseHeaders=Remote-User, Remote-Groups, Remote-Name, Remote-Email'
# - 'traefik.http.middlewares.authelia-basic.forwardauth.address=http://authelia_authelia:9091/api/verify?auth=basic'
# - 'traefik.http.middlewares.authelia-basic.forwardauth.trustForwardHeader=true'
# - 'traefik.http.middlewares.authelia-basic.forwardauth.authResponseHeaders=Remote-User, Remote-Groups, Remote-Name, Remote-Email'
redis:
image: git.nixc.us/nixius/authelia:production-redis
# command: redis-server --appendonly yes