diff --git a/.env.example b/.env.example index b3e5c40..dba2bed 100644 --- a/.env.example +++ b/.env.example @@ -22,3 +22,8 @@ AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_GROUP_NAME='cn' # AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_UNAUTHENTICATED_BIND='' # AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_FEATURE_DETECTION_FAILURE='' AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USER='cn=binduser,DC=ldap,DC=example' +AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PASSWORD_FILE='/run/secrets/LDAP_BINDDN_PASSWORD' + +AUTHELIA_IDENTITY_VALIDATION_RESET_PASSWORD_JWT_SECRET_FILE='/run/secrets/JWT_SECRET' +AUTHELIA_SESSION_SECRET_FILE='/run/secrets/SESSION_SECRET' +AUTHELIA_STORAGE_ENCRYPTION_KEY_FILE='/run/secrets/STORAGE_ENCRYPTION_KEY' diff --git a/docker-compose.yml b/docker-compose.yml index 25015db..a57b971 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -3,12 +3,9 @@ services: container_name: 'authelia' image: 'docker.io/authelia/authelia:latest' restart: 'unless-stopped' - secrets: ['JWT_SECRET', 'SESSION_SECRET', 'STORAGE_ENCRYPTION_KEY'] - environment: - AUTHELIA_IDENTITY_VALIDATION_RESET_PASSWORD_JWT_SECRET_FILE: '/run/secrets/JWT_SECRET' - AUTHELIA_SESSION_SECRET_FILE: '/run/secrets/SESSION_SECRET' - AUTHELIA_STORAGE_ENCRYPTION_KEY_FILE: '/run/secrets/STORAGE_ENCRYPTION_KEY' - AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PASSWORD_FILE: '/run/secrets/LDAP_BINDDN_PASSWORD' + secrets: ['JWT_SECRET', 'SESSION_SECRET', 'STORAGE_ENCRYPTION_KEY', 'LDAP_BINDDN_PASSWORD'] + env_file: + - .env volumes: - ./config:/config networks: