30 lines
728 B
YAML
30 lines
728 B
YAML
server:
|
|
endpoints:
|
|
authz:
|
|
forward-auth:
|
|
implementation: 'ForwardAuth'
|
|
|
|
# Security https://www.authelia.com/configuration/security/access-control/
|
|
access_control:
|
|
networks:
|
|
- name: 'internal'
|
|
networks:
|
|
- '192.168.1.0/24'
|
|
- '172.16.0.0/12'
|
|
rules:
|
|
- domain: 'gitea.tremendousturtle.tools'
|
|
policy: bypass
|
|
networks:
|
|
- 'internal'
|
|
resources:
|
|
- '^/api([/?].*)?$'
|
|
- '^/v2([/?].*)?$'
|
|
- domain: '*.tremendousturtle.tools'
|
|
policy: two_factor
|
|
|
|
# Session https://www.authelia.com/configuration/session/introduction/
|
|
# Set also AUTHELIA_SESSION_SECRET_FILE
|
|
session:
|
|
cookies:
|
|
- domain: 'tremendousturtle.tools'
|
|
authelia_url: 'https://auth.tremendousturtle.tools' |