docker/authelia/config/configuration.server.yml

@@ -1,83 +0,0 @@
-theme: grey
-
-server:
-  address: tcp://0.0.0.0:9091
-  buffers:
-    read: 8192
-    write: 8192
-  asset_path: /config/assets
-
-log:
-  level: info
-  format: text
-#  file_path: /config/authelia.log
-#  keep_stdout: true
-
-totp:
-  issuer: {{ env "X_AUTHELIA_SITE_NAME" }}
-  period: 30
-  skew: 1
-
-duo_api:
-  hostname: {{ env "X_AUTHELIA_DUO_HOSTNAME" }}
-  integration_key: {{ secret "/config/secrets/DUO_API_INTEGRATION_KEY" }}
-  secret_key: {{ secret "/config/secrets/DUO_API_SECRET_KEY" }}
-
-webauthn:
-  disable: false
-  display_name: Authelia
-  attestation_conveyance_preference: indirect
-  user_verification: preferred
-  timeout: 60s
-
-identity_validation:
-  reset_password:
-    jwt_secret: {{ secret "/config/secrets/IDENTITY_VALIDATION_RESET_PASSWORD_JWT_SECRET" }}
-
-regulation:
-  max_retries: 3
-  find_time: 2m
-  ban_time: 5m
-
-storage:
-  # encryption_key: {{ secret "/config/secrets/STORAGE_ENCRYPTION_KEY" }}
-  # local:
-  #   path: /config/db.sqlite3
-  mysql:
-    host: authelia_mariadb
-    port: 3306
-    database: authelia
-    username: authelia
-    ## Password can also be set using a secret: https://www.authelia.com/docs/configuration/secrets.html
-    password: authelia
-    timeout: 5s
-
-notifier:
-  smtp:
-    address: smtp.gmail.com:587
-    username: {{ env "X_AUTHELIA_EMAIL" }}
-    password: {{ secret "/config/secrets/NOTIFIER_SMTP_PASSWORD" }}
-    sender: "{{ env "X_AUTHELIA_SITE_NAME" }} <{{ env "X_AUTHELIA_EMAIL" }}>"
-    subject: "[Authelia] {title}"
-
-session:
-  secret: {{ secret "/config/secrets/SESSION_SECRET" }}
-  name: authelia_session
-  same_site: lax
-  expiration: 1h
-  inactivity: 5m
-  remember_me: 1M
-  cookies:
-  - domain: {{ env "TRAEFIK_DOMAIN" }}
-    authelia_url: 'https://login.{{ env "TRAEFIK_DOMAIN" }}'
-    name: 'authelia_session'
-    same_site: 'lax'
-    inactivity: '5m'
-    expiration: '1h'
-    remember_me: '1d'
-  redis:
-    host: authelia-redis
-    port: 6379
-    database_index: 0
-    maximum_active_connections: 8
-    minimum_idle_connections: 0

stack.production.yml

@@ -38,6 +38,14 @@ networks:
 services:
   authelia:
     image: git.nixc.us/nixius/authelia:production-authelia
+    ## These are now included in the Dockerfile
+    # command:
+    #   - "authelia"
+    #   - "--config=/config/configuration.server.yml"
+    #   - "--config=/config/configuration.ldap.yml"
+    #   - "--config=/config/configuration.acl.yml"
+    #   - "--config=/config/configuration.identity.providers.yml"
+    #   - "--config=/config/configuration.oidc.clients.yml"
     secrets:
       - AUTHENTICATION_BACKEND_LDAP_PASSWORD
       - CLIENT_SECRET_HEADSCALE