RPJosh
/
authelia
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
authelia/internal/suites/Standalone/configuration.yml

82 lines
1.7 KiB
YAML
Raw Normal View History

Fix inactivity Ãe2e tests.
2019-01-30 22:33:14 +00:00
###############################################################
# Authelia minimal configuration #
###############################################################
port: 9091
logs_level: debug
Fix unit tests.
2019-02-22 09:27:54 +00:00
default_redirection_url: https://home.example.com:8080/
Bootstrap Go implementation of Authelia. This is going to be the v4. Expected improvements: - More reliable due to static typing. - Bump of performance. - Improvement of logging. - Authelia can be shipped as a single binary. - Will likely work on ARM architecture.
2019-04-24 21:52:08 +00:00
jwt_secret: very_important_secret
Fix inactivity Ãe2e tests.
2019-01-30 22:33:14 +00:00
authentication_backend:
file:
Rewrite and fix remaining suites in Go.
2019-11-24 20:27:59 +00:00
path: /var/lib/authelia/users.yml
Fix inactivity Ãe2e tests.
2019-01-30 22:33:14 +00:00
session:
secret: unsecure_session_secret
domain: example.com
Bootstrap Go implementation of Authelia. This is going to be the v4. Expected improvements: - More reliable due to static typing. - Bump of performance. - Improvement of logging. - Authelia can be shipped as a single binary. - Will likely work on ARM architecture.
2019-04-24 21:52:08 +00:00
expiration: 3600 # 1 hour
inactivity: 300 # 5 minutes
Fix inactivity Ãe2e tests.
2019-01-30 22:33:14 +00:00
storage:
local:
Build docker image upfront in CI and use it in integration tests. (#555) * Build docker image upfront in CI and use it in integration tests. Previously, the development workflow was broken because the container generated from Dockerfile.CI was used in dev environments but the binary was not pre-built as it is on buildkite. I propose to just remove that image and use the "to be published" image instead in integration tests. This will have several advantages: - Fix the dev workflow. - Remove CI arch from authelia-scripts build command - Optimize CI time in buildkite since we'll cache a way small artifact - We don't build authelia more than once for earch arch. * Fix suites and only build ARM images on master or tagged commits * Optimise pipeline dependencies and Kubernetes suite to utilise cache * Run unit tests and docker image build in parallel. * Fix suite trying to write on read only fs. Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
2020-01-17 19:46:51 +00:00
path: /tmp/db.sqlite3
Fix inactivity Ãe2e tests.
2019-01-30 22:33:14 +00:00
totp:
issuer: example.com
access_control:
default_policy: deny
rules:
[BREAKING] Create a suite for kubernetes tests. Authelia client uses hash router instead of browser router in order to work with Kubernetes nginx-ingress-controller. This is also better for users having old browsers. This commit is breaking because it requires to change the configuration of the proxy to include the # in the URL of the login portal.
2019-03-03 22:51:52 +00:00
- domain: singlefactor.example.com
Fix inactivity Ãe2e tests.
2019-01-30 22:33:14 +00:00
policy: one_factor
Fix the bypass strategy. Before this fix an anonymous user was not able to access a resource that were configured with a bypass policy. This was due to a useless check of the userid in the auth session. Moreover, in the case of an anonymous user, we should not check the inactivity period since there is no session. Also refactor /verify endpoint for better testability and add tests in a new suite.
2019-03-22 15:54:27 +00:00
- domain: public.example.com
policy: bypass
Display only one 2FA option. Displaying only one option at 2FA stage will allow to add more options like DUO push or OAuth. The user can switch to other option and in this case the option is remembered so that next time, the user will see the same option. The latest option is considered as the prefered option by Authelia.
2019-03-23 14:44:46 +00:00
- domain: secure.example.com
policy: two_factor
Rewrite and fix remaining suites in Go.
2019-11-24 20:27:59 +00:00
- domain: "*.example.com"
Fix inactivity Ãe2e tests.
2019-01-30 22:33:14 +00:00
subject: "group:admins"
policy: two_factor
- domain: dev.example.com
resources:
Rewrite and fix remaining suites in Go.
2019-11-24 20:27:59 +00:00
- "^/users/john/.*$"
Fix inactivity Ãe2e tests.
2019-01-30 22:33:14 +00:00
subject: "user:john"
policy: two_factor
- domain: dev.example.com
resources:
Rewrite and fix remaining suites in Go.
2019-11-24 20:27:59 +00:00
- "^/users/harry/.*$"
Fix inactivity Ãe2e tests.
2019-01-30 22:33:14 +00:00
subject: "user:harry"
policy: two_factor
Rewrite and fix remaining suites in Go.
2019-11-24 20:27:59 +00:00
- domain: "*.mail.example.com"
Fix inactivity Ãe2e tests.
2019-01-30 22:33:14 +00:00
subject: "user:bob"
policy: two_factor
- domain: dev.example.com
resources:
Rewrite and fix remaining suites in Go.
2019-11-24 20:27:59 +00:00
- "^/users/bob/.*$"
Fix inactivity Ãe2e tests.
2019-01-30 22:33:14 +00:00
subject: "user:bob"
policy: two_factor
Rewrite and fix remaining suites in Go.
2019-11-24 20:27:59 +00:00
regulation:
Fix inactivity Ãe2e tests.
2019-01-30 22:33:14 +00:00
# Set it to 0 to disable max_retries.
max_retries: 3
Rewrite and fix remaining suites in Go.
2019-11-24 20:27:59 +00:00
# The user is banned if the authenticaction failed `max_retries` times in a `find_time` seconds window.
Create a specific suite for short timeouts to let humans use simple suite.
2019-03-02 21:27:54 +00:00
find_time: 300
Fix inactivity Ãe2e tests.
2019-01-30 22:33:14 +00:00
# The length of time before a banned user can login again.
Create a specific suite for short timeouts to let humans use simple suite.
2019-03-02 21:27:54 +00:00
ban_time: 900
Fix inactivity Ãe2e tests.
2019-01-30 22:33:14 +00:00
notifier:
smtp:
Declare suites as Go structs and bootstrap e2e test framework in Go. Some tests are not fully rewritten in Go, a typescript wrapper is called instead until we remove the remaining TS tests and dependencies. Also, dockerize every components (mainly Authelia backend, frontend and kind) so that the project does not interfere with user host anymore (open ports for instance). The only remaining intrusive change is the one done during bootstrap to add entries in /etc/hosts. It will soon be avoided using authelia.com domain that I own.
2019-11-02 14:32:58 +00:00
host: smtp
Fix inactivity Ãe2e tests.
2019-01-30 22:33:14 +00:00
port: 1025
sender: admin@example.com
Force TLS and valid x509 certs in SMTP Notifier by default - Adjust AUTH LOGIN functionality to be closer to AUTH PLAIN - Removed: secure (notifier smtp conf) boolean string - Added: disable_verify_cert (notifier smtp conf) boolean - disables X509 validation of certificates - Added: disable_require_tls (notifier smtp conf) boolean - allows emails to be sent over plain text (for non-authenticated only) - Added: trusted_cert (notifier smtp conf) string (path) - allows specifying the path of a PEM format cert to add to trusted cert pool - Make SMTP notifier return errors on connection over plain text - Make SMTP notifier return errors on TLS connection with invalid certs - Implemented various debug logging for the SMTP notifier - Implemented explicit SMTP closes on errors (previously left con open) - Split SMTPNotifier Send func to seperate funcs for: - writing future test suites and startup checks more easily - organization and readability - Add details of changes to docs/security.yml - Adjust config.yml's (template and test) for the changes
2019-12-30 02:03:51 +00:00
disable_require_tls: true