mirror of
https://github.com/outbackdingo/homelab-v.git
synced 2026-08-25 14:53:19 +00:00
106 lines
3.0 KiB
YAML
106 lines
3.0 KiB
YAML
# https://github.com/authelia/chartrepo/blob/master/charts/authelia/values.yaml
|
|
image:
|
|
registry: ghcr.io
|
|
repository: authelia/authelia
|
|
tag: 4.38.10 # renovate: docker=ghcr.io/authelia/authelia
|
|
pullPolicy: IfNotPresent
|
|
|
|
pod:
|
|
kind: 'Deployment'
|
|
|
|
configMap:
|
|
theme: 'dark'
|
|
|
|
access_control:
|
|
# TODO: upgrade to 'two_factor'
|
|
default_policy: 'one_factor'
|
|
rules:
|
|
- domain_regex: '^.*\.stonegarden.dev$'
|
|
policy: 'one_factor'
|
|
|
|
authentication_backend:
|
|
ldap:
|
|
enabled: true
|
|
implementation: 'lldap'
|
|
address: 'ldap://lldap.lldap.svc.cluster.local'
|
|
base_dn: 'dc=stonegarden,dc=dev'
|
|
users_filter: '(&(|({username_attribute}={input})({mail_attribute}={input}))(objectClass=person))'
|
|
additional_users_dn: 'ou=people'
|
|
groups_filter: '(member={dn})'
|
|
additional_groups_dn: 'ou=groups'
|
|
user: 'UID=authelia,OU=people,DC=stonegarden,DC=dev'
|
|
password:
|
|
secret_name: 'lldap-auth'
|
|
|
|
session:
|
|
cookies:
|
|
- subdomain: authelia
|
|
domain: stonegarden.dev
|
|
|
|
storage:
|
|
postgres:
|
|
enabled: false
|
|
address: 'tcp://postgres.databases.svc.cluster.local:5432'
|
|
# Switch to Postgres later
|
|
local:
|
|
enabled: true
|
|
|
|
notifier:
|
|
filesystem:
|
|
enabled: true
|
|
|
|
identity_providers:
|
|
oidc:
|
|
## Enables this in the config map. Currently in beta stage.
|
|
## See https://www.authelia.com/r/openid-connect/
|
|
enabled: true
|
|
jwks:
|
|
- key_id: 'default'
|
|
algorithm: 'RS256'
|
|
use: 'sig'
|
|
# TODO: CHANGE THIS COMPROMISED TEST KEY!
|
|
key:
|
|
path: /secrets/oidc-jwks/default.RS256.private.pem
|
|
certificate_chain:
|
|
path: /secrets/oidc-jwks/default.RS256.public.crt
|
|
clients:
|
|
- client_id: 'argocd'
|
|
# TODO: CHANGE THIS COMPROMISED TEST KEY!
|
|
client_secret:
|
|
path: '/secrets/oidc-argocd/clientSecret'
|
|
client_name: 'Argo CD'
|
|
public: false
|
|
# TODO: upgrade to 'two_factor'
|
|
authorization_policy: 'one_factor'
|
|
redirect_uris:
|
|
- 'https://argocd.stonegarden.dev/auth/callback'
|
|
- 'https://argocd.stonegarden.dev/applications'
|
|
scopes: [ 'openid', 'groups', 'email', 'profile' ]
|
|
userinfo_signed_response_alg: 'none'
|
|
- client_id: 'argocd-cli'
|
|
client_name: 'Argo CD (CLI)'
|
|
public: true
|
|
authorization_policy: 'one_factor'
|
|
redirect_uris: [ 'http://localhost:8085/auth/callback' ]
|
|
scopes: [ 'openid', 'groups', 'email', 'profile', 'offline_access' ]
|
|
userinfo_signed_response_alg: 'none'
|
|
|
|
secret:
|
|
additionalSecrets:
|
|
lldap-auth:
|
|
items:
|
|
- key: password
|
|
path: authentication.ldap.password.txt
|
|
oidc-argocd:
|
|
items:
|
|
- key: clientSecret
|
|
path: clientSecret
|
|
oidc-jwks:
|
|
items:
|
|
- key: default.RS256.private.pem
|
|
path: default.RS256.private.pem
|
|
- key: default.RS256.public.crt
|
|
path: default.RS256.public.crt
|
|
|
|
|