Fix traefik/authelia bugs

Signed-off-by: Nikolaos Karaolidis <nick@karaolidis.com>
This commit is contained in:
2025-03-12 20:12:45 +00:00
parent 6ed4c4917a
commit e55135163d
4 changed files with 32 additions and 31 deletions

View File

@@ -38,9 +38,6 @@ in
"authelia-configuration.yaml".content = builtins.readFile (
(pkgs.formats.yaml { }).generate "configuration.yaml" {
theme = "auto";
telemetry.metrics.enabled = true;
authentication_backend = {
refresh_interval = "always";
file = {
@@ -52,6 +49,8 @@ in
password_policy.zxcvbn.enabled = true;
access_control.default_policy = "deny";
server.endpoints.authz.forward-auth.implementation = "ForwardAuth";
session = {
secret = hmConfig.sops.placeholder."authelia/session";
@@ -98,6 +97,8 @@ in
password = hmConfig.sops.placeholder."authelia/smtp";
sender = "jupiter@karaolidis.com";
};
theme = "auto";
}
);
@@ -162,7 +163,6 @@ in
labels = [
"traefik.enable=true"
"traefik.http.routers.authelia.rule=Host(`id.karaolidis.com`)"
"traefik.http.routers.authelia.tls.certresolver=letsencrypt"
"traefik.http.middlewares.authelia.forwardAuth.trustForwardHeader=true"
"traefik.http.middlewares.authelia.forwardAuth.address=http://authelia:9091/api/authz/forward-auth"