· 5 years ago · Aug 13, 2020, 04:06 PM
1###############################################################
2# Authelia configuration #
3###############################################################
4
5host: 0.0.0.0
6port: 9091
7log_level: info
8# This secret can also be set using the env variables AUTHELIA_JWT_SECRET_FILE
9jwt_secret: vjK5DgHLrj1DIxMxl7YX5NNr5pRAA # get secret from here https://www.grc.com/passwords.htm
10default_redirection_url: https://auth.example.com
11totp:
12 issuer: authelia.com
13 period: 30
14 skew: 1
15
16#duo_api:
17# hostname: api-123456789.example.com
18# integration_key: ABCDEF
19# # This secret can also be set using the env variables AUTHELIA_DUO_API_SECRET_KEY_FILE
20# secret_key: 1234567890abcdefghifjkl
21
22authentication_backend:
23 file:
24 path: /config/users_database.yml
25# password:
26# algorithm: argon2id
27# iterations: 1
28# key_length: 32
29# salt_length: 16
30# memory: 1024
31# parallelism: 8
32
33access_control:
34 default_policy: deny
35 rules:
36 # Rules applied to everyone
37 - domain:
38 - "jellyfin.example.com"
39 - "auth.example.com"
40 policy: bypass
41 - domain:
42 - "*.example.com"
43 - "example.com"
44 policy: one_factor
45# networks:
46# - 192.168.1.0/24
47
48session:
49 name: authelia_session
50 # This secret can also be set using the env variables AUTHELIA_SESSION_SECRET_FILE
51 secret: LvFBxCP8QHsPVQmJbxuUBzGy9ofrzrOm2zhMXD # get secret from here https://www.grc.com/passwords.htm
52 expiration: 3600 # 1 hour
53 inactivity: 300 # 5 minutes
54 domain: example.com # Should match whatever your root protected domain is
55
56 redis:
57 host: redis
58 port: 6379
59 # This secret can also be set using the env variables AUTHELIA_SESSION_REDIS_PASSWORD_FILE
60# password: authelia
61
62regulation:
63 max_retries: 3
64 find_time: 1200
65 ban_time: 36000
66
67storage:
68 local:
69 path: /config/db.sqlite3
70
71notifier:
72 filesystem:
73 filename: /config/notification.txt
74# smtp:
75# username: test
76# # This secret can also be set using the env variables AUTHELIA_NOTIFIER_SMTP_PASSWORD_FILE
77# password: password
78# host: mail.example.com
79# port: 25
80# sender: admin@example.com