Refactor Authelia configuration: remove server timeouts, update identity validation section, and add session secret for improved security
This commit is contained in:
@@ -10,22 +10,21 @@ server:
|
|||||||
buffers:
|
buffers:
|
||||||
read: 4096
|
read: 4096
|
||||||
write: 4096
|
write: 4096
|
||||||
timeouts:
|
|
||||||
read: 6s
|
|
||||||
write: 6s
|
|
||||||
idle: 30s
|
|
||||||
|
|
||||||
log:
|
log:
|
||||||
level: info
|
level: info
|
||||||
|
|
||||||
theme: auto
|
theme: auto
|
||||||
|
|
||||||
|
# Where to send users if they hit a protected resource without a Referer
|
||||||
|
default_redirection_url: "https://traefik.gate.3launchpad.com/"
|
||||||
|
|
||||||
#########################################################
|
#########################################################
|
||||||
# Identity Validation
|
# Secrets (use env vars in production)
|
||||||
#########################################################
|
#########################################################
|
||||||
identity_validation:
|
# Prefer env vars:
|
||||||
reset_password:
|
# AUTHELIA_JWT_SECRET, AUTHELIA_SESSION_SECRET, AUTHELIA_STORAGE_ENCRYPTION_KEY
|
||||||
jwt_secret: "changeme_jwt_secret"
|
jwt_secret: "changeme_jwt_secret"
|
||||||
|
|
||||||
#########################################################
|
#########################################################
|
||||||
# Authentication Backend (local file)
|
# Authentication Backend (local file)
|
||||||
@@ -81,6 +80,7 @@ session:
|
|||||||
expiration: 1h
|
expiration: 1h
|
||||||
inactivity: 30m
|
inactivity: 30m
|
||||||
remember_me_duration: 1M
|
remember_me_duration: 1M
|
||||||
|
secret: "changeme_session_secret"
|
||||||
redis:
|
redis:
|
||||||
host: redis
|
host: redis
|
||||||
port: 6379
|
port: 6379
|
||||||
|
|||||||
Reference in New Issue
Block a user