traefikv3_authelia_config_v438+

---
###############################################################
#                   Authelia configuration                    #
#                   fuer Version v4.38+                       #
###############################################################

identity_validation:
  reset_password:
    jwt_secret: #jwt_secret goes here

server:
  address: tcp://0.0.0.0:9091

log:
  level: debug

totp:
  issuer: authelia
  period: 30
  skew: 1

authentication_backend:
  file:
    path: /config/users_database.yml
    password:
      algorithm: argon2id
      iterations: 1
      salt_length: 16
      parallelism: 8
      memory: 128

access_control:
  default_policy: deny
  rules:
    - domain:
        - "oeffentlich.euredomain.de"
        - "authelia.euredomain.de"
      policy: bypass
    - domain:
        - "sicher.euredomain.de"
      policy: one_factor
    - domain:
        - "supersicher.euredomain.de"
       policy: two_factor

session:
  name: authelia_session
  secret: #authelia_session secrete goes here
  expiration: 1h
  inactivity: 5m
  remember_me: 1w
  cookies:
    - domain: euredomain.de
      authelia_url: https://authelia.euredomain.de
      default_redirection_url: https://authelia.euredomain.de/redirect
      same_site: lax  # oder "strict"

regulation:
  max_retries: 3
  find_time: 2m
  ban_time: 5m

storage:
  local:
    path: /config/db.sqlite3
  encryption_key: #encryption_key goes here

notifier:
  smtp:
    address: submissions://smtp.euredomain.de:587
    username: [email protected]
    password: sicher123!
    sender: [email protected]
    disable_require_tls: true
  #filesystem:
    #filename: /config/notification.txt

identity_providers:
  oidc:
    jwks:
      - key_id: euredomain
        algorithm: RS256
        use: sig
        key: |
          -----BEGIN PRIVATE KEY-----

          -----END PRIVATE KEY-----
        certificate_chain: |
          -----BEGIN CERTIFICATE-----

          -----END CERTIFICATE-----