Authelia

###############################################################
#                Authelia minimal configuration               #
###############################################################
port: 8080
logs_level: trace
jwt_secret: insecure_secret
authentication_backend:
  file:
    path: /etc/authelia/users.yml
totp:
  issuer: authelia.<domain>.com

duo_api:
  hostname: <hostname>
  integration_key: <key>
  secret_key: <secret_key>

session:
  name: authelia_session_id
  secret: insecure_session_secret
  domain: <domain>.com
  expiration: 3600 # 1 hour
  inactivity: 300 # 5 minutes
  redis:
    host: redis
    port: 6379
    password: <redis_pw>

storage:
  mysql:
    host: mariadb
    port: 3306
    database: authelia
    username: authelia
    password: <pass>

#  local:
#    path: /var/lib/authelia/db.sqlite3

access_control:
  default_policy: deny
  rules:

    - domain: authelia.<domain>.com
      policy: bypass

    - domain: archbw.<domain>.com
      policy: two_factor

    - domain: bwbackend.<domain>.com
      policy: two_factor

    - domain: bw.<domain>.com
      policy: two_factor

#    - domain: "*.<domain>.com"
#      subject: "group:admin"
#      policy: two_factor

notifier:
# : filesystem:
#    filename: /var/data/authelia/emails.txt
  smtp:
    username: smtp
    password: <pass>
    host: postfix.<domain>.com
    port: 587
    sender: postmaster@authelia.<domain>.com