authelia/internal/suites/Postgres/configuration.yml

77 lines
2.0 KiB
YAML
Raw Permalink Normal View History

---
2019-11-16 19:50:58 +00:00
###############################################################
# Authelia minimal configuration #
###############################################################
jwt_secret: 'very_important_secret'
default_redirection_url: 'https://home.example.com:8080/'
server:
address: 'tcp://:9091'
tls:
certificate: '/pki/public.backend.crt'
key: '/pki/private.backend.pem'
2019-11-16 19:50:58 +00:00
log:
level: 'debug'
2019-11-16 19:50:58 +00:00
authentication_backend:
file:
path: '/config/users.yml'
2019-11-16 19:50:58 +00:00
session:
secret: 'unsecure_session_secret'
expiration: '1h' # 1 hour
inactivity: '5m' # 5 minutes
remember_me: '1y'
cookies:
- domain: 'example.com'
authelia_url: 'https://login.example.com:8080'
2019-11-16 19:50:58 +00:00
# Configuration of the storage backend used to store data and secrets. i.e. totp data
storage:
encryption_key: 'a_not_so_secure_encryption_key'
2019-11-16 19:50:58 +00:00
postgres:
address: 'tcp://postgres:5432'
database: 'authelia'
username: 'admin'
password: 'password'
2019-11-16 19:50:58 +00:00
# TOTP Issuer Name
#
# This will be the issuer name displayed in Google Authenticator
# See: https://github.com/google/google-authenticator/wiki/Key-Uri-Format for more info on issuer names
totp:
issuer: 'example.com'
2019-11-16 19:50:58 +00:00
access_control:
default_policy: 'deny'
2019-11-16 19:50:58 +00:00
rules:
- domain: 'public.example.com'
policy: 'bypass'
- domain: 'admin.example.com'
policy: 'two_factor'
- domain: 'secure.example.com'
policy: 'two_factor'
- domain: 'singlefactor.example.com'
policy: 'one_factor'
2019-11-16 19:50:58 +00:00
# Configuration of the authentication regulation mechanism.
regulation:
# Set it to 0 to disable max_retries.
max_retries: 3
# The user is banned if the authentication failed `max_retries` times in a `find_time` seconds window.
find_time: '8s'
2019-11-16 19:50:58 +00:00
# The length of time before a banned user can login again.
ban_time: 10
notifier:
# Use a SMTP server for sending notifications
smtp:
address: 'smtp://smtp:1025'
sender: 'admin@example.com'
disable_require_tls: 'true'
...