Update access control policy in Authelia configuration and add users database to docker-compose
This commit is contained in:
@@ -44,30 +44,7 @@ authentication_backend:
|
|||||||
# Access Control
|
# Access Control
|
||||||
#########################################################
|
#########################################################
|
||||||
access_control:
|
access_control:
|
||||||
default_policy: deny
|
default_policy: bypass
|
||||||
rules:
|
|
||||||
- domain: "status.gate.3launchpad.com"
|
|
||||||
policy: bypass
|
|
||||||
|
|
||||||
- domain: "traefik.gate.3launchpad.com"
|
|
||||||
subject: ["group:admins"]
|
|
||||||
policy: two_factor
|
|
||||||
|
|
||||||
- domain: "portainer.gate.3launchpad.com"
|
|
||||||
subject: ["group:admins"]
|
|
||||||
policy: two_factor
|
|
||||||
|
|
||||||
- domain_regex: "(grafana|prometheus|umami)\\.gate\\.3launchpad\\.com"
|
|
||||||
subject:
|
|
||||||
- "group:admins"
|
|
||||||
- "group:devs"
|
|
||||||
policy: one_factor
|
|
||||||
|
|
||||||
- domain: "*.gate.3launchpad.com"
|
|
||||||
subject:
|
|
||||||
- "group:users"
|
|
||||||
- "group:admins"
|
|
||||||
- "group:devs"
|
|
||||||
policy: one_factor
|
policy: one_factor
|
||||||
|
|
||||||
#########################################################
|
#########################################################
|
||||||
|
|||||||
@@ -174,6 +174,7 @@ services:
|
|||||||
TZ: "${TZ}"
|
TZ: "${TZ}"
|
||||||
volumes:
|
volumes:
|
||||||
- ./authelia/configuration.yml:/config/configuration.yml:ro
|
- ./authelia/configuration.yml:/config/configuration.yml:ro
|
||||||
|
- ./authelia/users_database.yml:/config/users_database.yml:ro
|
||||||
- authelia_data:/config
|
- authelia_data:/config
|
||||||
networks: [traefik_proxy, internal]
|
networks: [traefik_proxy, internal]
|
||||||
labels:
|
labels:
|
||||||
|
|||||||
Reference in New Issue
Block a user