Refactor Authelia configuration: restructure identity validation section and update session cookie settings for improved clarity
This commit is contained in:
@@ -20,11 +20,11 @@ theme: auto
|
||||
default_redirection_url: "https://traefik.gate.3launchpad.com/"
|
||||
|
||||
#########################################################
|
||||
# Secrets (use env vars in production)
|
||||
# Identity Validation
|
||||
#########################################################
|
||||
# Prefer env vars:
|
||||
# AUTHELIA_JWT_SECRET, AUTHELIA_SESSION_SECRET, AUTHELIA_STORAGE_ENCRYPTION_KEY
|
||||
jwt_secret: "changeme_jwt_secret"
|
||||
identity_validation:
|
||||
reset_password:
|
||||
jwt_secret: "changeme_jwt_secret"
|
||||
|
||||
#########################################################
|
||||
# Authentication Backend (local file)
|
||||
@@ -75,12 +75,14 @@ access_control:
|
||||
#########################################################
|
||||
session:
|
||||
name: authelia_session
|
||||
domain: "gate.3launchpad.com"
|
||||
same_site: lax # <- fixed (was 'Lax')
|
||||
same_site: lax
|
||||
expiration: 1h
|
||||
inactivity: 30m
|
||||
remember_me_duration: 1M # deprecated but auto-mapped; safe to keep
|
||||
remember_me: 1M
|
||||
secret: "changeme_session_secret"
|
||||
cookies:
|
||||
- domain: "gate.3launchpad.com"
|
||||
authelia_url: "https://auth.gate.3launchpad.com"
|
||||
redis:
|
||||
host: redis
|
||||
port: 6379
|
||||
|
||||
Reference in New Issue
Block a user