Add Authelia SSO, remove authentik, restrict ultralytics port

- Add authelia/ stack: Authelia 4.38 + Redis 7-alpine on isolated
  authelia-internal bridge; Authelia also on npm-network for NPM
  forward-auth. Secrets via env vars (not committed).
- Add authelia/config/configuration.yaml: file-based users, SQLite
  storage, one_factor policy for *.kolpacksoftware.com
- Add **/users_database.yaml to .gitignore (host-only secret)
- Remove authentik/ (non-functional leftover)
- ultralytics: bind port 8501 to 127.0.0.1 only (auth enforced via NPM)
This commit is contained in:
2026-02-22 20:21:11 +00:00
parent 717ba151e5
commit 9f98a4081e
6 changed files with 91 additions and 96 deletions
+6
View File
@@ -0,0 +1,6 @@
# Authelia secrets — generate values with:
# openssl rand -hex 32 (for JWT and session secrets)
# openssl rand -hex 16 (for storage encryption key)
AUTHELIA_JWT_SECRET=
AUTHELIA_SESSION_SECRET=
AUTHELIA_STORAGE_ENCRYPTION_KEY=