poprhythm
f665865762
- quizmaster: removed entirely (test service, no longer used); also removed Portainer stack and /srv/quizmaster data - leafweb: removed orphaned MSSQL compose file (no running container, no Portainer stack, no data on disk) - authelia, gitea, couchdb, portainer, immich (server + ml): add com.centurylinklabs.watchtower.monitor-only=true so watchtower still notifies on new versions without auto-applying them - ladder: restore restart: unless-stopped (was commented out) - rackpeek: add missing TZ env var
40 lines
1.2 KiB
YAML
40 lines
1.2 KiB
YAML
services:
|
|
authelia:
|
|
container_name: authelia
|
|
image: authelia/authelia:4.38
|
|
restart: unless-stopped
|
|
labels:
|
|
- com.centurylinklabs.watchtower.monitor-only=true
|
|
volumes:
|
|
- /srv/authelia/config:/config
|
|
environment:
|
|
- TZ=America/New_York
|
|
- AUTHELIA_JWT_SECRET=${AUTHELIA_JWT_SECRET}
|
|
- AUTHELIA_SESSION_SECRET=${AUTHELIA_SESSION_SECRET}
|
|
- AUTHELIA_STORAGE_ENCRYPTION_KEY=${AUTHELIA_STORAGE_ENCRYPTION_KEY}
|
|
- AUTHELIA_IDENTITY_PROVIDERS_OIDC_HMAC_SECRET=${AUTHELIA_IDENTITY_PROVIDERS_OIDC_HMAC_SECRET}
|
|
# OIDC client secrets are NOT passed as env vars — bcrypt hashes contain $ which
|
|
# Portainer/shell interpolates. Stored as files in /srv/authelia/config/secrets/ instead.
|
|
- X_AUTHELIA_CONFIG_FILTERS=template
|
|
networks:
|
|
- npm-network
|
|
- authelia-internal
|
|
depends_on:
|
|
- authelia-redis
|
|
|
|
authelia-redis:
|
|
container_name: authelia-redis
|
|
image: redis:7-alpine
|
|
restart: unless-stopped
|
|
command: --save 60 1 --loglevel warning
|
|
volumes:
|
|
- /srv/authelia/redis:/data
|
|
networks:
|
|
- authelia-internal
|
|
|
|
networks:
|
|
npm-network:
|
|
external: true
|
|
authelia-internal:
|
|
driver: bridge
|