poprhythm
5e91f0c68b
- Switch from unsupported \${VAR} substitution to {{ secret "..." }} template syntax
- Enable X_AUTHELIA_CONFIG_FILTERS=template in compose
- Client secrets now loaded from /config/secrets/oidc_* files on host
- Use PBKDF2-SHA512 hashes (not bcrypt, not plaintext)
35 lines
859 B
YAML
35 lines
859 B
YAML
services:
|
|
authelia:
|
|
container_name: authelia
|
|
image: authelia/authelia:4.38
|
|
restart: unless-stopped
|
|
volumes:
|
|
- /srv/authelia/config:/config
|
|
environment:
|
|
- TZ=America/New_York
|
|
- AUTHELIA_JWT_SECRET=${AUTHELIA_JWT_SECRET}
|
|
- AUTHELIA_SESSION_SECRET=${AUTHELIA_SESSION_SECRET}
|
|
- AUTHELIA_STORAGE_ENCRYPTION_KEY=${AUTHELIA_STORAGE_ENCRYPTION_KEY}
|
|
- X_AUTHELIA_CONFIG_FILTERS=template
|
|
networks:
|
|
- npm-network
|
|
- authelia-internal
|
|
depends_on:
|
|
- authelia-redis
|
|
|
|
authelia-redis:
|
|
container_name: authelia-redis
|
|
image: redis:7-alpine
|
|
restart: unless-stopped
|
|
command: --save 60 1 --loglevel warning
|
|
volumes:
|
|
- /srv/authelia/redis:/data
|
|
networks:
|
|
- authelia-internal
|
|
|
|
networks:
|
|
npm-network:
|
|
external: true
|
|
authelia-internal:
|
|
driver: bridge
|