RPJosh
/
authelia
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix kubernetes configuration.

pull/259/head^2
Clement Michaud 2018-08-26 14:32:19 +02:00
parent 920b2c4f6a
commit cf89aa909c
1 changed files with 53 additions and 35 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

88
example/kube/authelia/configs/config.yml
View File

@ -22,43 +22,61 @@ logs_level: debug
# be redirected upon successful authentication. # be redirected upon successful authentication.
default_redirection_url: https://login.kube.example.com default_redirection_url: https://login.kube.example.com
# LDAP configuration # The authentication backend to use for verifying user passwords
# and retrieve information such as email address and groups
# users belong to.
# #
# Example: for user john, the DN will be cn=john,ou=users,dc=example,dc=com # There are two supported backends: `ldap` and `file`.
ldap: authentication_backend:
# The url of the ldap server # LDAP backend configuration.
url: ldap://ldap-service #
# This backend allows Authelia to be scaled to more
# The base dn for every entries # than one instance and therefore is recommended for
base_dn: dc=example,dc=com # production.
ldap:
# An additional dn to define the scope to all users # The url of the ldap server
additional_users_dn: ou=users url: ldap://ldap-service
# The users filter used to find the user DN # The base dn for every entries
# {0} is a matcher replaced by username. base_dn: dc=example,dc=com
# 'cn={0}' by default.
users_filter: cn={0} # An additional dn to define the scope to all users
additional_users_dn: ou=users
# An additional dn to define the scope of groups
additional_groups_dn: ou=groups # The users filter used to find the user DN
# {0} is a matcher replaced by username.
# The groups filter used for retrieving groups of a given user. # 'cn={0}' by default.
# {0} is a matcher replaced by username. users_filter: cn={0}
# {dn} is a matcher replaced by user DN.
# 'member={dn}' by default. # An additional dn to define the scope of groups
groups_filter: (&(member={dn})(objectclass=groupOfNames)) additional_groups_dn: ou=groups
# The attribute holding the name of the group # The groups filter used for retrieving groups of a given user.
group_name_attribute: cn # {0} is a matcher replaced by username.
# {dn} is a matcher replaced by user DN.
# The attribute holding the mail address of the user # 'member={dn}' by default.
mail_attribute: mail groups_filter: (&(member={dn})(objectclass=groupOfNames))
# The username and password of the admin user. # The attribute holding the name of the group
user: cn=admin,dc=example,dc=com group_name_attribute: cn
password: password
# The attribute holding the mail address of the user
mail_attribute: mail
# The username and password of the admin user.
user: cn=admin,dc=example,dc=com
password: password
# File backend configuration.
#
# With this backend, the users database is stored in a file
# which is updated when users reset their passwords.
# Therefore, this backend is meant to be used in a dev environment
# and not in production since it prevents Authelia to be scaled to
# more than one instance.
#
## file:
## path: ./users_database.yml
# Authentication methods # Authentication methods
# #