106 lines
2.4 KiB
YAML
106 lines
2.4 KiB
YAML
###############################################################################
|
|
# Authelia Configuration #
|
|
###############################################################################
|
|
|
|
theme: dark
|
|
|
|
identity_validation:
|
|
reset_password:
|
|
jwt_secret: LCnTJ5AxoB4tGvClpfhOSiLCnTJ5AxoB4tGvClpfhOSi # TODO CHANGE ME!
|
|
|
|
default_2fa_method: "totp"
|
|
|
|
## Server Configuration
|
|
server:
|
|
address: tcp://0.0.0.0:9091/
|
|
endpoints:
|
|
enable_pprof: false
|
|
enable_expvars: false
|
|
|
|
## Log Configuration
|
|
log:
|
|
level: debug
|
|
|
|
## TOTP Configuration
|
|
totp:
|
|
issuer: auth.lab.bildme.ru # TODO CHANGE ME!
|
|
|
|
## WebAuthn Configuration
|
|
webauthn:
|
|
disable: false
|
|
timeout: 60s
|
|
display_name: Authelia
|
|
attestation_conveyance_preference: indirect
|
|
user_verification: preferred
|
|
|
|
## NTP Configuration
|
|
ntp:
|
|
address: "time.cloudflare.com:123"
|
|
version: 4
|
|
max_desync: 3s
|
|
disable_startup_check: false
|
|
disable_failure: false
|
|
|
|
## Authentication Backend Provider Configuration
|
|
authentication_backend:
|
|
## File (Authentication Provider)
|
|
file:
|
|
path: /config/users_database.yml
|
|
watch: true
|
|
search:
|
|
email: false
|
|
case_insensitive: false
|
|
password:
|
|
algorithm: argon2
|
|
argon2:
|
|
variant: 'argon2id'
|
|
iterations: 3
|
|
memory: 65536
|
|
parallelism: 4
|
|
key_length: 32
|
|
salt_length: 16
|
|
|
|
## Session Provider Configuration
|
|
session:
|
|
secret: Y8W4HvSen0R4Y8W4HvSen0R4Y8W4HvSen0R4 # TODO CHANGE ME!
|
|
expiration: 8h
|
|
inactivity: 4h
|
|
cookies:
|
|
- name: 'Authelia Demo cookies'
|
|
domain: lab.bildme.ru # TODO CHANGE ME!
|
|
authelia_url: https://auth.lab.bildme.ru/ # TODO CHANGE ME!
|
|
expiration: '1 hour'
|
|
inactivity: '5 minutes'
|
|
|
|
## Redis Provider
|
|
redis:
|
|
host: redis
|
|
port: 6379
|
|
database_index: 0
|
|
maximum_active_connections: 20
|
|
minimum_idle_connections: 0
|
|
|
|
## Regulation Configuration
|
|
regulation:
|
|
max_retries: 3
|
|
find_time: 2m
|
|
ban_time: 30m
|
|
|
|
## Storage Provider Configuration
|
|
storage:
|
|
encryption_key: 9JM1ZMf980gQ3enewZEoTq9JM1ZMf980gQ3enewZEoTq # TODO CHANGE ME!
|
|
local:
|
|
path: /config/db.sqlite3
|
|
|
|
## Notification Provider
|
|
notifier:
|
|
disable_startup_check: true
|
|
## File System (Notification Provider)
|
|
# filesystem:
|
|
# filename: /config/notification.txt
|
|
smtp: # TODO CHANGE ME!
|
|
subject: "[Authelia] {title}"
|
|
username: 'authelia@mg.bildme.ru'
|
|
sender: 'auth@mg.bildme.ru'
|
|
address: 'smtp://smtp.eu.mailgun.org:587'
|