authelia/internal/suites/Docker/configuration.yml

###############################################################
#                Authelia minimal configuration               #
###############################################################

port: 9091

log_level: debug

default_redirection_url: https://home.example.com:8080/

jwt_secret: very_important_secret

authentication_backend:
  file:
    path: /var/lib/authelia/users.yml

session:
  secret: unsecure_session_secret
  domain: example.com
  expiration: 3600 # 1 hour
  inactivity: 300 # 5 minutes

storage:
  local:
    path: /var/lib/authelia/db.sqlite3

totp:
  issuer: example.com

access_control:
  default_policy: deny

  rules:
    - domain: singlefactor.example.com
      policy: one_factor

    - domain: public.example.com
      policy: bypass

    - domain: secure.example.com
      policy: two_factor

    - domain: "*.example.com"
      subject: "group:admins"
      policy: two_factor

    - domain: dev.example.com
      resources:
        - "^/users/john/.*$"
      subject: "user:john"
      policy: two_factor

    - domain: dev.example.com
      resources:
        - "^/users/harry/.*$"
      subject: "user:harry"
      policy: two_factor

    - domain: "*.mail.example.com"
      subject: "user:bob"
      policy: two_factor

    - domain: dev.example.com
      resources:
        - "^/users/bob/.*$"
      subject: "user:bob"
      policy: two_factor

regulation:
  # Set it to 0 to disable max_retries.
  max_retries: 3
  # The user is banned if the authentication failed `max_retries` times in a `find_time` seconds window.
  find_time: 300
  # The length of time before a banned user can login again.
  ban_time: 900

notifier:
  smtp:
    host: smtp
    port: 1025
    sender: admin@example.com
    disable_require_tls: true
Fix and parallelize integration tests. 2019-11-30 23:49:52 +07:00			`###############################################################`
			`# Authelia minimal configuration #`
			`###############################################################`

			`port: 9091`

[FEATURE] [BREAKING] Support writing logs in a file. (#686) * [FEATURE] Support writing logs in a file. * Add documentation about logs file path. * Rename logs_level and logs_file_path into log_level and log_file_path. * Update BREAKING.md Fixes #338 Co-authored-by: Amir Zarrinkafsh <nightah@me.com> 2020-03-10 02:57:53 +07:00			`log_level: debug`
Fix and parallelize integration tests. 2019-11-30 23:49:52 +07:00
			`default_redirection_url: https://home.example.com:8080/`

			`jwt_secret: very_important_secret`

			`authentication_backend:`
			`file:`
			`path: /var/lib/authelia/users.yml`

			`session:`
			`secret: unsecure_session_secret`
			`domain: example.com`
			`expiration: 3600 # 1 hour`
			`inactivity: 300 # 5 minutes`

			`storage:`
			`local:`
Allow administrator to provide a Google Analytics tracking ID. Providing a GA tracking ID allows administrators to analyze how the portal is used by their users in large environments, i.e., with many users. This will make even more sense when we have users and admins management interfaces. 2019-12-07 23:40:42 +07:00			`path: /var/lib/authelia/db.sqlite3`
Fix and parallelize integration tests. 2019-11-30 23:49:52 +07:00
			`totp:`
			`issuer: example.com`

			`access_control:`
			`default_policy: deny`

			`rules:`
			`- domain: singlefactor.example.com`
			`policy: one_factor`

			`- domain: public.example.com`
			`policy: bypass`

			`- domain: secure.example.com`
			`policy: two_factor`

			`- domain: "*.example.com"`
			`subject: "group:admins"`
			`policy: two_factor`

			`- domain: dev.example.com`
			`resources:`
			`- "^/users/john/.*$"`
			`subject: "user:john"`
			`policy: two_factor`

			`- domain: dev.example.com`
			`resources:`
			`- "^/users/harry/.*$"`
			`subject: "user:harry"`
			`policy: two_factor`

			`- domain: "*.mail.example.com"`
			`subject: "user:bob"`
			`policy: two_factor`

			`- domain: dev.example.com`
			`resources:`
			`- "^/users/bob/.*$"`
			`subject: "user:bob"`
			`policy: two_factor`

			`regulation:`
			`# Set it to 0 to disable max_retries.`
			`max_retries: 3`
Misc Spelling Corrections - Mostly changes to spelling of comments/docs/displayed text - A few changes to test function names 2020-01-21 07:10:00 +07:00			# The user is banned if the authentication failed `max_retries` times in a `find_time` seconds window.
Fix and parallelize integration tests. 2019-11-30 23:49:52 +07:00			`find_time: 300`
			`# The length of time before a banned user can login again.`
			`ban_time: 900`

			`notifier:`
			`smtp:`
			`host: smtp`
			`port: 1025`
			`sender: admin@example.com`
Force TLS and valid x509 certs in SMTP Notifier by default - Adjust AUTH LOGIN functionality to be closer to AUTH PLAIN - Removed: secure (notifier smtp conf) boolean string - Added: disable_verify_cert (notifier smtp conf) boolean - disables X509 validation of certificates - Added: disable_require_tls (notifier smtp conf) boolean - allows emails to be sent over plain text (for non-authenticated only) - Added: trusted_cert (notifier smtp conf) string (path) - allows specifying the path of a PEM format cert to add to trusted cert pool - Make SMTP notifier return errors on connection over plain text - Make SMTP notifier return errors on TLS connection with invalid certs - Implemented various debug logging for the SMTP notifier - Implemented explicit SMTP closes on errors (previously left con open) - Split SMTPNotifier Send func to seperate funcs for: - writing future test suites and startup checks more easily - organization and readability - Add details of changes to docs/security.yml - Adjust config.yml's (template and test) for the changes 2019-12-30 09:03:51 +07:00			`disable_require_tls: true`