Claude
ecbe1fc03d
Self-hosted SSO portal with file-based users, SQLite storage, filesystem notifier, and an iptables-banning fail2ban sidecar. Designed to drop into a DotheEvo-style ~/docker layout next to a dockerized Caddy on the main server, joining the same external caddy_net so Caddy reaches Authelia by container name. fail2ban runs in host network mode with NET_ADMIN/NET_RAW caps so its bans hit DOCKER-USER and actually drop packets at the edge. Includes a Caddy snippet (caddy/snippet.example.caddyfile) to merge into the user's real Caddyfile -- this repo doesn't manage Caddy itself. https://claude.ai/code/session_013XZ1vmgk78k2PEQ5DmJhF3
15 lines
562 B
Bash
15 lines
562 B
Bash
# Copy to .env and fill in. DO NOT commit .env.
|
|
#
|
|
# Secrets themselves live as files under authelia/secrets/ (also gitignored)
|
|
# so they can be mounted into the container without env-var leakage. This
|
|
# .env only holds non-secret tunables.
|
|
|
|
# Pin your image versions. Bump to current stable when you upgrade --
|
|
# check https://github.com/authelia/authelia/releases and
|
|
# https://github.com/crazy-max/docker-fail2ban/releases.
|
|
AUTHELIA_VERSION=4.39
|
|
FAIL2BAN_VERSION=latest
|
|
|
|
# Used by both containers for log timestamps. Set to your IANA zone.
|
|
TZ=America/New_York
|