Skip to content

Commit ff5a5d0

Browse files
bensuperpcbensuperpc
committed
Add authelia
1 parent d1d5a9d commit ff5a5d0

91 files changed

Lines changed: 873 additions & 355 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

‎DockerCompose.mk‎

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -29,8 +29,9 @@ COMPOSE_DIR ?= --project-directory ./$(PROJECT_DIRECTORY)
2929

3030
UID ?= 1000
3131
GID ?= 1000
32+
TZ ?= Europe/Paris
3233

33-
ENV_ARG_VAR ?= PUID=$(UID) PGID=$(GID)
34+
ENV_ARG_VAR ?= PUID=$(UID) PGID=$(GID) TZ=$(TZ)
3435

3536
DOCKER_COMPOSE_COMMAND ?= $(ENV_ARG_VAR) $(DOCKER_EXEC) compose $(COMPOSE_DIR) $(COMPOSE_FILES) $(PROFILE_CMD)
3637

@@ -70,7 +71,7 @@ update: image-update git-update
7071

7172
.PHONY: clean
7273
clean:
73-
docker system prune -f
74+
$(ENV_ARG_VAR) $(DOCKER_EXEC) system prune -f
7475

7576
.PHONY: purge
7677
purge:

‎README.md‎

Lines changed: 159 additions & 51 deletions
Large diffs are not rendered by default.

‎infrastructure/docker-compose.yml‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -49,6 +49,10 @@ include:
4949
- services/dependency-track/docker-compose.dependency-track.yml
5050
# Searxng
5151
- services/searxng/docker-compose.searxng.yml
52+
# Authelia
53+
- services/authelia/docker-compose.authelia.yml
54+
# Dozzle
55+
- services/dozzle/docker-compose.dozzle.yml
5256
# Minecraft
5357
- services/minecraft-server/docker-compose.yml
5458
# 7daystodie

‎infrastructure/services/7daystodie-server/7daystodie/docker-compose.7daystodie.yml‎

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ services:
55
container_name: 7daystodie_server
66
profiles:
77
- 7daystodie_server
8-
restart: on-failure:5
8+
restart: on-failure:7
99
ports:
1010
- "26900:26900"
1111
- "26901:26901"
@@ -25,6 +25,7 @@ services:
2525
environment:
2626
- PUID=${PUID:-1000}
2727
- PGID=${PGID:-1000}
28+
- TZ=${TZ:-Europe/Paris}
2829
# security_opt:
2930
# - no-new-privileges:true
3031
# cap_drop:

‎infrastructure/services/7daystodie-server/backup/docker-compose.backup.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ services:
66
- 7daystodie_backup
77
depends_on:
88
- 7daystodie_server
9-
restart: on-failure:5
9+
restart: on-failure:7
1010
env_file:
1111
- ./env/7daystodie_backup.env
1212
volumes:

‎infrastructure/services/argus/docker-compose.argus.yml‎

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -6,9 +6,10 @@ services:
66
profiles:
77
- argus
88
environment:
9-
ARGUS_UID: ${PUID:-1000}
10-
ARGUS_GID: ${PGID:-1000}
11-
restart: on-failure:5
9+
- ARGUS_UID=${PUID:-1000}
10+
- ARGUS_GID=${PGID:-1000}
11+
- TZ=${TZ:-Europe/Paris}
12+
restart: on-failure:7
1213
depends_on:
1314
- caddy
1415
networks:

‎infrastructure/services/authelia/config/configuration.yml‎

Lines changed: 64 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,64 @@
1+
theme: auto
2+
3+
server:
4+
address: "tcp://0.0.0.0:9091"
5+
6+
log:
7+
level: info
8+
9+
authentication_backend:
10+
file:
11+
path: /config/users_database.yml
12+
13+
access_control:
14+
default_policy: deny
15+
rules:
16+
- domain:
17+
- "authelia.bensuperpc.org"
18+
- "www.bensuperpc.org"
19+
- "public.bensuperpc.org"
20+
- "it-tools.bensuperpc.org"
21+
- "omni-tools.bensuperpc.org"
22+
- "cyberchef.bensuperpc.org"
23+
- "wordpress.bensuperpc.org"
24+
- "homepage.bensuperpc.org"
25+
policy: bypass
26+
- domain:
27+
- "jellyfin.bensuperpc.org"
28+
- "openwebui.bensuperpc.org"
29+
- "searxng.bensuperpc.org"
30+
subject:
31+
- 'group:admins'
32+
- 'group:users'
33+
policy: one_factor
34+
- domain:
35+
- "*.bensuperpc.org"
36+
subject:
37+
- 'group:admins'
38+
policy: one_factor
39+
# - domain: "dependency-track.bensuperpc.org"
40+
# resources:
41+
# - "^/api/.*"
42+
# policy: bypass
43+
# - domain: "*.bensuperpc.org"
44+
# policy: two_factor
45+
46+
session:
47+
expiration: 72h
48+
inactivity: 60m
49+
remember_me: 1M
50+
cookies:
51+
- domain: "bensuperpc.org"
52+
authelia_url: "https://authelia.bensuperpc.org"
53+
54+
regulation:
55+
max_retries: 5
56+
find_time: 3m
57+
ban_time: 15m
58+
59+
storage:
60+
postgres: {}
61+
62+
notifier:
63+
filesystem:
64+
filename: /config/notification.txt

‎infrastructure/services/authelia/config/users_database.yml‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
users:
2+
bensuperpc:
3+
displayname: "Bensuperpc"
4+
password: "$argon2id$v=19$m=65536,t=3,p=4$1T+CwoeP6hcoddG8l1iilg$omcB+SICmNQzmZIXhE54S5+J68AU32f60a5ctYoEObU"
5+
email: "bensuperpc@gmail.com"
6+
groups:
7+
- admins
8+
- users

‎infrastructure/services/authelia/docker-compose.authelia.yml‎

Lines changed: 52 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,52 @@
1+
services:
2+
authelia:
3+
container_name: authelia
4+
image: authelia/authelia:latest
5+
profiles:
6+
- authelia
7+
- caddy
8+
depends_on:
9+
authelia-postgres:
10+
condition: service_healthy
11+
# environment:
12+
# - TZ=America/New_York
13+
# - PUID=${PUID:-1000}
14+
# - PGID=${PGID:-1000}
15+
env_file:
16+
- ./env/authelia.env
17+
environment:
18+
- TZ=${TZ:-Europe/Paris}
19+
volumes:
20+
- ./config:/config
21+
networks:
22+
- authelia-network
23+
restart: on-failure:7
24+
25+
authelia-postgres:
26+
image: postgres:17-alpine
27+
container_name: authelia-postgres
28+
restart: on-failure:7
29+
volumes:
30+
- authelia_db_data:/var/lib/postgresql/data
31+
env_file:
32+
- ./env/authelia_postgres.env
33+
profiles:
34+
- authelia
35+
- caddy
36+
environment:
37+
- TZ=${TZ:-Europe/Paris}
38+
healthcheck:
39+
test: [ "CMD-SHELL", "pg_isready -U $${POSTGRES_USER} -d $${POSTGRES_DB}" ]
40+
interval: 5s
41+
timeout: 3s
42+
retries: 5
43+
networks:
44+
- authelia-network
45+
46+
networks:
47+
authelia-network:
48+
driver: bridge
49+
name: authelia-network
50+
51+
volumes:
52+
authelia_db_data: {}

‎infrastructure/services/authelia/env/authelia.env‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
AUTHELIA_IDENTITY_VALIDATION_RESET_PASSWORD_JWT_SECRET=ht87MVnXkXhBpDkMUHqKDqdg8UGBJt+Fx5jNIqXnN2k=
2+
AUTHELIA_SESSION_SECRET=nsvbXKGRXVZUCUkOapntlq/Zh+d75WacTK5Jgyh8zYk=
3+
AUTHELIA_STORAGE_ENCRYPTION_KEY=aWeIT74xIhGVd9nUOr4YTToTl5rpBEbzc/fv4jemuos=
4+
AUTHELIA_STORAGE_POSTGRES_HOST=authelia-postgres
5+
AUTHELIA_STORAGE_POSTGRES_PORT=5432
6+
AUTHELIA_STORAGE_POSTGRES_DATABASE=authelia_db
7+
AUTHELIA_STORAGE_POSTGRES_USERNAME=authelia
8+
AUTHELIA_STORAGE_POSTGRES_PASSWORD=sAdkxFW6k3GiMOrlBpl6OV76eb9cQz/uk95jmA2UpI8=

0 commit comments

Comments
 (0)