root/ubuntu-post-install
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix SMTP claims and stale Authelia service list

Browse Source 
Confirmed live (not from docs): Authelia's in-portal Settings -> Change
Password also emails a one-time code to confirm, same as Forgot
Password — it is not a no-SMTP path as earlier text here assumed.
Reworded all three spots in authelia.sh that claimed otherwise to
point at the admin-side "Edit an existing user" -> "Reset password"
action instead, which never touches email.

Also corrected CLAUDE.md's "No built-in auth — should be protected"
list per an actual grep of services/*.sh: it was missing
drum-rhythm-game, iopaint, paintplus, stirling-pdf, wolf, and the
unconditionally-protected security-dashboard/asterisk, and wrongly
included sky-cam (a non-Docker batch script with no web UI or Caddy
integration at all, nothing for Authelia to protect).
This commit is contained in:
Claude
2026-08-17 05:26:30 +00:00
parent c995d571a4
commit d69806c24e
2 changed files with 33 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
CLAUDE.md
+17 -1
View File
@@ -372,7 +372,23 @@ collision.)
`filebrowser`, `wg-easy`, `ntfy` (configurable)
**No built-in auth — should be protected:**
`magicmirror`, `wolf-pair`, `js99er`, `sky-cam`
`magicmirror`, `wolf-pair`, `js99er`, `drum-rhythm-game`, `iopaint`,
`paintplus`, `stirling-pdf`, `wolf` (web UI). Each of these prompts
"Protect X with Authelia SSO? (y/n)" and passes `import authelia` as
`configure_caddy_for_service`'s extra block when accepted.
`security-dashboard` is Authelia-protected unconditionally (not asked —
baked into its own Caddy block, since it exposes Asterisk/CrowdSec
data). `asterisk` offers the same protection for its web admin, with a
choice between a local `import authelia` and a remote `forward_auth` (see
the remote-Authelia note earlier in this file).
`sky-cam` was previously listed here but has no Caddy integration or web
login of any kind — it's a non-Docker batch/cron script that renders
timelapse videos and posts them to Mattermost, so there's nothing on it
for Authelia to protect. Removed from this list; if it grows a web UI in
the future, add it back and wire up the same prompt other services here
use.
For services without built-in auth, prompt the user before calling
`configure_caddy_for_service` and pass `import authelia` as the extra block