authelia/.env.example

30 lines
2.0 KiB
Plaintext

AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDRESS='ldaps://ldap.example.edu.br'
AUTHELIA_AUTHENTICATION_BACKEND_LDAP_IMPLEMENTATION='custom'
AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TIMEOUT='5s'
AUTHELIA_AUTHENTICATION_BACKEND_LDAP_START_TLS=false
AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_MINIMUM_VERSION='TLS1.2'
# AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_MAXIMUM_VERSION=''
AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_SKIP_VERIFY=false
AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_SERVER_NAME='ldap.example.edu.br'
AUTHELIA_AUTHENTICATION_BACKEND_LDAP_BASE_DN='DC=ldap,DC=example'
AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_USERS_DN='OU=users'
AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERS_FILTER='(&(|({username_attribute}={input})({mail_attribute}={input}))(objectClass=posixAccount))'
AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_GROUPS_DN='OU=groups'
AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUPS_FILTER='(&(member=CN={input},OU=users,DC=ldap,DC=example)(objectClass=groupOfEntries))'
# AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUP_SEARCH_MODE=''
AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_DISTINGUISHED_NAME='dn'
AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_USERNAME='cn'
AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_DISPLAY_NAME=''
AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_MAIL='mail'
AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_MEMBER_OF='memberOf'
AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_GROUP_NAME='cn'
# AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_REFERRALS=''
# AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_UNAUTHENTICATED_BIND=''
# AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_FEATURE_DETECTION_FAILURE=''
AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USER='cn=binduser,DC=ldap,DC=example'
AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PASSWORD_FILE='/run/secrets/LDAP_BINDDN_PASSWORD'
AUTHELIA_IDENTITY_VALIDATION_RESET_PASSWORD_JWT_SECRET_FILE='/run/secrets/JWT_SECRET'
AUTHELIA_SESSION_SECRET_FILE='/run/secrets/SESSION_SECRET'
AUTHELIA_STORAGE_ENCRYPTION_KEY_FILE='/run/secrets/STORAGE_ENCRYPTION_KEY'