ansible
/
homelab
1
0
Fork 0
Code Issues 33 Pull Requests Projects 1 Releases Wiki Activity

Add Authelia #44

Merged
lukas merged 15 commits from add-authelia into main 2021-06-20 19:55:56 +00:00
Conversation 0 Commits 15 Files Changed 11 +8 -1
4 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit 171ef655f8 - Show all commits

1
provision.sh Executable file
View File

@ -0,0 +1 @@
ANSIBLE_VAULT_PASSWORD_FILE=(pass show ansible-homelab | psub) vagrant provision

1
roles/authelia/templates/authelia.conf.j2
View File

@ -1,5 +1,6 @@
server { server {
listen 80; listen 80;
server_name auth.{{ base_domain }};
return 301 https://$host$request_uri; return 301 https://$host$request_uri;
} }

4
roles/authelia/templates/configuration.yml.j2
View File

@ -28,8 +28,10 @@ access_control:
default_policy: deny default_policy: deny
rules: rules:
- domain: - domain:
- "{{ base_domain }}"
- "*.{{ base_domain }}"
- "keycloak.{{ base_domain }}" - "keycloak.{{ base_domain }}"
policy: one_factor policy: deny
session: session:
name: authelia_session name: authelia_session
secret: somerandomsecret secret: somerandomsecret

3
roles/nginx/templates/snippets/proxy.conf.j2
View File

@ -27,6 +27,9 @@ proxy_buffers 64 256k;
# If behind reverse proxy, forwards the correct IP # If behind reverse proxy, forwards the correct IP
set_real_ip_from 10.0.0.0/8; set_real_ip_from 10.0.0.0/8;
set_real_ip_from 172.16.0.0/12; set_real_ip_from 172.16.0.0/12;
set_real_ip_from 172.17.0.0/16;
set_real_ip_from 172.18.0.0/16;
set_real_ip_from 172.19.0.0/16;
set_real_ip_from 192.168.0.0/16; set_real_ip_from 192.168.0.0/16;
set_real_ip_from fc00::/7; set_real_ip_from fc00::/7;
real_ip_header X-Forwarded-For; real_ip_header X-Forwarded-For;