RWejlgaard/pez-infra
1
0
Fork 0
mirror of https://github.com/RWejlgaard/pez-infra.git synced 2026-05-06 04:14:43 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

also fix bug with authelia

Browse source
This commit is contained in:
Rasmus Wejlgaard 2026-04-25 21:26:05 +01:00
parent 2f808b6ffe
commit d73d298a69
1 changed files with 43 additions and 39 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

82
ansible/services/authelia/docker-compose.yml
View file

@ -6,22 +6,20 @@
services: services:
authelia: authelia:
container_name: authelia container_name: "authelia"
image: docker.io/authelia/authelia:latest image: "docker.io/authelia/authelia:latest"
restart: unless-stopped restart: "unless-stopped"
ports: ports:
- '127.0.0.1:9091:9091' - "127.0.0.1:9091:9091"
environment: environment:
AUTHELIA_IDENTITY_VALIDATION_RESET_PASSWORD_JWT_SECRET_FILE: /secrets/JWT_SECRET AUTHELIA_IDENTITY_VALIDATION_RESET_PASSWORD_JWT_SECRET_FILE: "/secrets/JWT_SECRET"
AUTHELIA_SESSION_SECRET_FILE: /secrets/SESSION_SECRET AUTHELIA_SESSION_SECRET_FILE: "/secrets/SESSION_SECRET"
AUTHELIA_STORAGE_ENCRYPTION_KEY_FILE: /secrets/STORAGE_ENCRYPTION_KEY AUTHELIA_STORAGE_ENCRYPTION_KEY_FILE: "/secrets/STORAGE_ENCRYPTION_KEY"
AUTHELIA_STORAGE_MYSQL_PASSWORD_FILE: /secrets/MYSQL_PASSWORD AUTHELIA_STORAGE_MYSQL_PASSWORD_FILE: "/secrets/MYSQL_PASSWORD"
AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PASSWORD_FILE: /secrets/LLDAP_ADMIN_PASSWORD TZ: "UTC"
AUTHELIA_NOTIFIER_SMTP_PASSWORD_FILE: /secrets/SMTP_PASSWORD
TZ: UTC
volumes: volumes:
- /root/authelia/config:/config - "/root/authelia/config:/config"
- /root/authelia/secrets:/secrets - "/root/authelia/secrets:/secrets"
depends_on: depends_on:
mariadb: mariadb:
condition: service_healthy condition: service_healthy
@ -31,19 +29,19 @@ services:
- authelia - authelia
mariadb: mariadb:
container_name: authelia-mariadb container_name: "authelia-mariadb"
image: docker.io/library/mariadb:11 image: "docker.io/library/mariadb:11"
restart: unless-stopped restart: "unless-stopped"
environment: environment:
MYSQL_ROOT_PASSWORD_FILE: /run/secrets/MYSQL_ROOT_PASSWORD MYSQL_ROOT_PASSWORD_FILE: "/run/secrets/MYSQL_ROOT_PASSWORD"
MYSQL_DATABASE: authelia MYSQL_DATABASE: "authelia"
MYSQL_USER: authelia MYSQL_USER: "authelia"
MYSQL_PASSWORD_FILE: /run/secrets/MYSQL_PASSWORD MYSQL_PASSWORD_FILE: "/run/secrets/MYSQL_PASSWORD"
TZ: UTC TZ: "UTC"
volumes: volumes:
- /root/authelia/mariadb:/var/lib/mysql - "/root/authelia/mariadb:/var/lib/mysql"
- /root/authelia/secrets/MYSQL_ROOT_PASSWORD:/run/secrets/MYSQL_ROOT_PASSWORD:ro - "/root/authelia/secrets/MYSQL_ROOT_PASSWORD:/run/secrets/MYSQL_ROOT_PASSWORD:ro"
- /root/authelia/secrets/MYSQL_PASSWORD:/run/secrets/MYSQL_PASSWORD:ro - "/root/authelia/secrets/MYSQL_PASSWORD:/run/secrets/MYSQL_PASSWORD:ro"
networks: networks:
- authelia - authelia
healthcheck: healthcheck:
@ -54,26 +52,32 @@ services:
start_period: 30s start_period: 30s
lldap: lldap:
container_name: authelia-lldap container_name: "authelia-lldap"
image: docker.io/lldap/lldap:latest image: "docker.io/lldap/lldap:latest"
restart: unless-stopped restart: "unless-stopped"
ports: ports:
- '17170:17170' # Web UI - "17170:17170" # Web UI
- '3890:3890' # LDAP - "3890:3890"
environment: environment:
UID: '1000' UID: "1000"
GID: '1000' GID: "1000"
TZ: UTC TZ: "UTC"
LLDAP_LDAP_BASE_DN: dc=pez,dc=sh LLDAP_LDAP_BASE_DN: "dc=pez,dc=sh"
LLDAP_LDAP_USER_DN: admin LLDAP_LDAP_USER_DN: "admin"
LLDAP_LDAP_USER_PASS_FILE: /secrets/LLDAP_ADMIN_PASSWORD LLDAP_LDAP_USER_PASS_FILE: "/secrets/LLDAP_ADMIN_PASSWORD"
LLDAP_JWT_SECRET_FILE: /secrets/LLDAP_JWT_SECRET LLDAP_JWT_SECRET_FILE: "/secrets/LLDAP_JWT_SECRET"
volumes: volumes:
- /root/authelia/lldap:/data - "/root/authelia/lldap:/data"
- /root/authelia/secrets/LLDAP_ADMIN_PASSWORD:/secrets/LLDAP_ADMIN_PASSWORD:ro - "/root/authelia/secrets/LLDAP_ADMIN_PASSWORD:/secrets/LLDAP_ADMIN_PASSWORD:ro"
- /root/authelia/secrets/LLDAP_JWT_SECRET:/secrets/LLDAP_JWT_SECRET:ro - "/root/authelia/secrets/LLDAP_JWT_SECRET:/secrets/LLDAP_JWT_SECRET:ro"
networks: networks:
- authelia - authelia
# healthcheck:
# test: ["CMD", "nc", "-zv", "localhost", "3890"]
# interval: 10s
# timeout: 5s
# retries: 5
# start_period: 10s
networks: networks:
authelia: authelia: