techies/authelia
1
0
Fork 0
mirror of https://github.com/0rangebananaspy/authelia.git synced 2024-09-14 22:47:21 +07:00
Code Issues Projects Releases Wiki Activity
c429488738
authelia/internal/configuration/test_resources/config.yml

115 lines
2.5 KiB
YAML
Raw Normal View History

Bootstrap Go implementation of Authelia. This is going to be the v4. Expected improvements: - More reliable due to static typing. - Bump of performance. - Improvement of logging. - Authelia can be shipped as a single binary. - Will likely work on ARM architecture.
2019-04-25 04:52:08 +07:00
###############################################################
# Authelia configuration #
###############################################################
Introduce viper in order to read secrets from env variables.
2020-01-22 03:56:44 +07:00
host: 127.0.0.1
Bootstrap Go implementation of Authelia. This is going to be the v4. Expected improvements: - More reliable due to static typing. - Bump of performance. - Improvement of logging. - Authelia can be shipped as a single binary. - Will likely work on ARM architecture.
2019-04-25 04:52:08 +07:00
port: 9091
[FEATURE] [BREAKING] Support writing logs in a file. (#686) * [FEATURE] Support writing logs in a file. * Add documentation about logs file path. * Rename logs_level and logs_file_path into log_level and log_file_path. * Update BREAKING.md Fixes #338 Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
2020-03-10 02:57:53 +07:00
log_level: debug
Bootstrap Go implementation of Authelia. This is going to be the v4. Expected improvements: - More reliable due to static typing. - Bump of performance. - Improvement of logging. - Authelia can be shipped as a single binary. - Will likely work on ARM architecture.
2019-04-25 04:52:08 +07:00
default_redirection_url: https://home.example.com:8080/
totp:
issuer: authelia.com
duo_api:
hostname: api-123456789.example.com
integration_key: ABCDEF
authentication_backend:
ldap:
url: ldap://127.0.0.1
base_dn: dc=example,dc=com
additional_users_dn: ou=users
Deprecate mongo and add mariadb as storage backend option.
2019-11-16 17:38:21 +07:00
users_filter: (cn={0})
Bootstrap Go implementation of Authelia. This is going to be the v4. Expected improvements: - More reliable due to static typing. - Bump of performance. - Improvement of logging. - Authelia can be shipped as a single binary. - Will likely work on ARM architecture.
2019-04-25 04:52:08 +07:00
additional_groups_dn: ou=groups
groups_filter: (&(member={dn})(objectclass=groupOfNames))
group_name_attribute: cn
mail_attribute: mail
user: cn=admin,dc=example,dc=com
access_control:
default_policy: deny
rules:
# Rules applied to everyone
- domain: public.example.com
policy: bypass
- domain: secure.example.com
policy: one_factor
# Network based rule, if not provided any network matches.
networks:
- 192.168.1.0/24
- domain: secure.example.com
policy: two_factor
- domain: singlefactor.example.com
policy: one_factor
Fix and parallelize integration tests.
2019-11-30 23:49:52 +07:00
# Rules applied to 'admins' group
- domain: "mx2.mail.example.com"
Fix DuoPush suite and do some clean up.
2019-12-04 14:46:49 +07:00
subject: "group:admins"
Bootstrap Go implementation of Authelia. This is going to be the v4. Expected improvements: - More reliable due to static typing. - Bump of performance. - Improvement of logging. - Authelia can be shipped as a single binary. - Will likely work on ARM architecture.
2019-04-25 04:52:08 +07:00
policy: deny
Fix and parallelize integration tests.
2019-11-30 23:49:52 +07:00
- domain: "*.example.com"
Fix DuoPush suite and do some clean up.
2019-12-04 14:46:49 +07:00
subject: "group:admins"
Bootstrap Go implementation of Authelia. This is going to be the v4. Expected improvements: - More reliable due to static typing. - Bump of performance. - Improvement of logging. - Authelia can be shipped as a single binary. - Will likely work on ARM architecture.
2019-04-25 04:52:08 +07:00
policy: two_factor
# Rules applied to 'dev' group
- domain: dev.example.com
resources:
Fix and parallelize integration tests.
2019-11-30 23:49:52 +07:00
- "^/groups/dev/.*$"
subject: "group:dev"
Bootstrap Go implementation of Authelia. This is going to be the v4. Expected improvements: - More reliable due to static typing. - Bump of performance. - Improvement of logging. - Authelia can be shipped as a single binary. - Will likely work on ARM architecture.
2019-04-25 04:52:08 +07:00
policy: two_factor
# Rules applied to user 'john'
- domain: dev.example.com
resources:
Fix and parallelize integration tests.
2019-11-30 23:49:52 +07:00
- "^/users/john/.*$"
subject: "user:john"
Bootstrap Go implementation of Authelia. This is going to be the v4. Expected improvements: - More reliable due to static typing. - Bump of performance. - Improvement of logging. - Authelia can be shipped as a single binary. - Will likely work on ARM architecture.
2019-04-25 04:52:08 +07:00
policy: two_factor
# Rules applied to user 'harry'
- domain: dev.example.com
resources:
Fix and parallelize integration tests.
2019-11-30 23:49:52 +07:00
- "^/users/harry/.*$"
subject: "user:harry"
Bootstrap Go implementation of Authelia. This is going to be the v4. Expected improvements: - More reliable due to static typing. - Bump of performance. - Improvement of logging. - Authelia can be shipped as a single binary. - Will likely work on ARM architecture.
2019-04-25 04:52:08 +07:00
policy: two_factor
# Rules applied to user 'bob'
Fix and parallelize integration tests.
2019-11-30 23:49:52 +07:00
- domain: "*.mail.example.com"
subject: "user:bob"
Bootstrap Go implementation of Authelia. This is going to be the v4. Expected improvements: - More reliable due to static typing. - Bump of performance. - Improvement of logging. - Authelia can be shipped as a single binary. - Will likely work on ARM architecture.
2019-04-25 04:52:08 +07:00
policy: two_factor
Fix and parallelize integration tests.
2019-11-30 23:49:52 +07:00
- domain: "dev.example.com"
Bootstrap Go implementation of Authelia. This is going to be the v4. Expected improvements: - More reliable due to static typing. - Bump of performance. - Improvement of logging. - Authelia can be shipped as a single binary. - Will likely work on ARM architecture.
2019-04-25 04:52:08 +07:00
resources:
Fix and parallelize integration tests.
2019-11-30 23:49:52 +07:00
- "^/users/bob/.*$"
subject: "user:bob"
Bootstrap Go implementation of Authelia. This is going to be the v4. Expected improvements: - More reliable due to static typing. - Bump of performance. - Improvement of logging. - Authelia can be shipped as a single binary. - Will likely work on ARM architecture.
2019-04-25 04:52:08 +07:00
policy: two_factor
session:
name: authelia_session
expiration: 3600000 # 1 hour
inactivity: 300000 # 5 minutes
domain: example.com
redis:
host: 127.0.0.1
port: 6379
regulation:
max_retries: 3
find_time: 120
ban_time: 300
storage:
Add support for PostgreSQL.
2019-11-17 02:50:58 +07:00
mysql:
Deprecate mongo and add mariadb as storage backend option.
2019-11-16 17:38:21 +07:00
host: 127.0.0.1
port: 3306
Bootstrap Go implementation of Authelia. This is going to be the v4. Expected improvements: - More reliable due to static typing. - Bump of performance. - Improvement of logging. - Authelia can be shipped as a single binary. - Will likely work on ARM architecture.
2019-04-25 04:52:08 +07:00
database: authelia
Deprecate mongo and add mariadb as storage backend option.
2019-11-16 17:38:21 +07:00
username: authelia
Bootstrap Go implementation of Authelia. This is going to be the v4. Expected improvements: - More reliable due to static typing. - Bump of performance. - Improvement of logging. - Authelia can be shipped as a single binary. - Will likely work on ARM architecture.
2019-04-25 04:52:08 +07:00
notifier:
smtp:
username: test
host: 127.0.0.1
port: 1025
sender: admin@example.com
Force TLS and valid x509 certs in SMTP Notifier by default - Adjust AUTH LOGIN functionality to be closer to AUTH PLAIN - Removed: secure (notifier smtp conf) boolean string - Added: disable_verify_cert (notifier smtp conf) boolean - disables X509 validation of certificates - Added: disable_require_tls (notifier smtp conf) boolean - allows emails to be sent over plain text (for non-authenticated only) - Added: trusted_cert (notifier smtp conf) string (path) - allows specifying the path of a PEM format cert to add to trusted cert pool - Make SMTP notifier return errors on connection over plain text - Make SMTP notifier return errors on TLS connection with invalid certs - Implemented various debug logging for the SMTP notifier - Implemented explicit SMTP closes on errors (previously left con open) - Split SMTPNotifier Send func to seperate funcs for: - writing future test suites and startup checks more easily - organization and readability - Add details of changes to docs/security.yml - Adjust config.yml's (template and test) for the changes
2019-12-30 09:03:51 +07:00
disable_require_tls: true
Reference in New Issue Copy Permalink