51 lines
954 B
YAML
51 lines
954 B
YAML
host: 0.0.0.0
|
|
port: 9491
|
|
log_level: trace
|
|
# $AUTHELIA_JWT_SECRET_FILE
|
|
jwt_secret: secret
|
|
default_redirection_url: https://not-found.bel.lan:9500
|
|
theme: dark
|
|
totp:
|
|
issuer: bel.lan
|
|
|
|
authentication_backend:
|
|
file:
|
|
path: ./users_database.yml
|
|
|
|
access_control:
|
|
default_policy: deny
|
|
rules:
|
|
- domain: authelia.bel.lan
|
|
policy: bypass
|
|
- domain: x.bel.lan
|
|
policy: bypass
|
|
- domain: y.bel.lan
|
|
policy: one_factor
|
|
- domain: z.bel.lan
|
|
policy: two_factor
|
|
|
|
session:
|
|
name: authelia_session
|
|
expiration: 1h # 1 hour
|
|
inactivity: 5m # 5 minutes
|
|
domain: bel.lan # Should match whatever your root protected domain is
|
|
remember_me_duration: 1M
|
|
|
|
regulation:
|
|
max_retries: 3
|
|
find_time: 120
|
|
ban_time: 300
|
|
|
|
storage:
|
|
local:
|
|
path: ./tmp/db.sqlite3
|
|
|
|
notifier:
|
|
disable_startup_check: false
|
|
filesystem:
|
|
filename: ./tmp/email.txt
|
|
|
|
#duo_api:
|
|
# hostname: x.bel.lan:9500
|
|
# integration_key: ABC
|
|
# secret_key: DEF |