authelia config

# Server Config
server:
  address: "tcp://0.0.0.0:9091/authelia"
  buffers:
    read: 4096
    write: 4096
  endpoints:
    authz:
      auth-request:
        implementation: 'AuthRequest'
          #authn_strategies:
          #- name: 'HeaderAuthRequestProxyAuthorization'
          #  schemes:
          #    - 'Basic'
          #- name: 'CookieSession'
  timeouts:
    read: '6s'
    write: '6s'
    idle: '30s'

# Log config
log:
  level: debug
  format: text
  file_path: "/config/authelia.log"
  keep_stdout: false
  #log_format: json


# 2FA Config

# TOTP Config
totp:
  disable: false
  issuer: example.com
  algorithm: sha256
  digits: 6
  period: 30
  skew: 1
  secret_size: 32

# Authelia Backend
authentication_backend:
  password_reset:
    disable: false
    custom_url: ""
  file:
    path: /config/users_database.yml
    password:
      algorithm: argon2id
      iterations: 1
      key_length: 32
      salt_length: 16
      memory: 512
      parallelism: 8

# Access Control for domains
access_control:
  rules:
    # Allow free access from local network
    - domain:
      - example.com
      - "*.example.com"
      networks:
        - 192.168.0.44/32
        - 76.183.182.193/32
      policy: one_factor
    - domain:
      - example.com
      - "*.example.com"
      policy: two_factor
  default_policy: deny



# Session Info
session:
  name: authelia_session
  secret: RANDOMDATA
  expiration: 8h
  inactivity: 5m
  remember_me: 1w
  same_site: lax
  cookies:
    - domain: 'example.com'
      authelia_url: 'https://authelia.example.com'
      name: 'authelia_session2'
      #default_redirection_url: 'https://heimdall.example.com'

identity_validation:
  reset_password:
    jwt_lifespan: '5 minutes'
    jwt_algorithm: 'HS256'
    jwt_secret: 'RANDOMDATA'

# regulation

regulation:
  max_retries: 3
  find_time: 2m
  ban_time: 5m
storage:
  encryption_key: RANDOMDATA
  local:
    path: /config/db.sqlite3
notifier:
  # You can disable the notifier startup check by setting this to true.
  disable_startup_check: false

  # For testing purpose, notifications can be sent in a file.
  filesystem:
    filename: /config/notification.txt