42 lines
1.6 KiB
YAML
42 lines
1.6 KiB
YAML
services:
|
|
authelia:
|
|
image: authelia/authelia:latest
|
|
container_name: authelia
|
|
restart: unless-stopped
|
|
environment:
|
|
- AUTHELIA_IDENTITY_VALIDATION_RESET_PASSWORD_JWT_SECRET=0737cb44a0bc366ad0f2b7027aad351feeadc50a8af6bee2a300917bc5963783
|
|
- AUTHELIA_SESSION_SECRET=5c2a6a2d18411b418251dfbeb3fb12751d3d48bbed8a0e5cf296c1870885b212
|
|
- AUTHELIA_STORAGE_ENCRYPTION_KEY=a1f2155ab8b9e5671557253ed05efc7453aaf691d65f3acee2a93a3ac61d3af6
|
|
volumes:
|
|
- ./configuration.yml:/config/configuration.yml:ro
|
|
- ./users_database.yml:/config/users_database.yml:ro
|
|
- authelia_data:/config
|
|
networks:
|
|
- traefik
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.http.routers.authelia.rule=Host(`us-test-authy.taila7f44e.ts.net`) && PathPrefix(`/authelia`)"
|
|
- "traefik.http.routers.authelia.entrypoints=https"
|
|
- "traefik.http.routers.authelia.tls.certresolver=tailscale"
|
|
- "traefik.http.services.authelia.loadbalancer.server.port=9091"
|
|
- "traefik.http.middlewares.authelia-auth.forwardAuth.address=http://authelia:9091/authelia/api/authz/forward-auth"
|
|
- "traefik.http.middlewares.authelia-auth.forwardAuth.trustForwardHeader=true"
|
|
- "traefik.http.middlewares.authelia-auth.forwardAuth.authResponseHeaders=Remote-User,Remote-Groups,Remote-Name,Remote-Email"
|
|
|
|
redis:
|
|
image: redis:alpine
|
|
container_name: authelia-redis
|
|
restart: unless-stopped
|
|
volumes:
|
|
- authelia_redis:/data
|
|
networks:
|
|
- traefik
|
|
|
|
volumes:
|
|
authelia_data:
|
|
authelia_redis:
|
|
|
|
networks:
|
|
traefik:
|
|
external: true
|