poprhythm
9f98a4081e
- Add authelia/ stack: Authelia 4.38 + Redis 7-alpine on isolated authelia-internal bridge; Authelia also on npm-network for NPM forward-auth. Secrets via env vars (not committed). - Add authelia/config/configuration.yaml: file-based users, SQLite storage, one_factor policy for *.kolpacksoftware.com - Add **/users_database.yaml to .gitignore (host-only secret) - Remove authentik/ (non-functional leftover) - ultralytics: bind port 8501 to 127.0.0.1 only (auth enforced via NPM)
7 lines
237 B
Bash
7 lines
237 B
Bash
# Authelia secrets — generate values with:
|
|
# openssl rand -hex 32 (for JWT and session secrets)
|
|
# openssl rand -hex 16 (for storage encryption key)
|
|
AUTHELIA_JWT_SECRET=
|
|
AUTHELIA_SESSION_SECRET=
|
|
AUTHELIA_STORAGE_ENCRYPTION_KEY=
|