mirror of
https://github.com/0rangebananaspy/authelia.git
synced 2024-09-14 22:47:21 +07:00
72a3f1e0d7
When no rule is set to two_factor in ACL configuration, 2FA is considered disabled. Therefore, when a user cannot be redirected correctly because no target URL is provided or the URL is unsafe, the user is either redirected to the default URL or to the 'already authenticated' view instead of the second factor view. Fixes #683
44 lines
936 B
YAML
44 lines
936 B
YAML
###############################################################
|
|
# Authelia minimal configuration #
|
|
###############################################################
|
|
|
|
port: 9091
|
|
|
|
logs_level: debug
|
|
|
|
default_redirection_url: https://home.example.com:8080/
|
|
|
|
jwt_secret: unsecure_secret
|
|
|
|
authentication_backend:
|
|
file:
|
|
path: /var/lib/authelia/users.yml
|
|
|
|
session:
|
|
secret: unsecure_session_secret
|
|
domain: example.com
|
|
expiration: 3600 # 1 hour
|
|
inactivity: 300 # 5 minutes
|
|
|
|
storage:
|
|
local:
|
|
path: /var/lib/authelia/db.sqlite
|
|
|
|
access_control:
|
|
default_policy: deny
|
|
rules:
|
|
- domain: singlefactor.example.com
|
|
policy: one_factor
|
|
- domain: public.example.com
|
|
policy: bypass
|
|
- domain: home.example.com
|
|
policy: bypass
|
|
- domain: unsafe.local
|
|
policy: bypass
|
|
|
|
notifier:
|
|
smtp:
|
|
host: smtp
|
|
port: 1025
|
|
sender: admin@example.com
|
|
disable_require_tls: true |