summaryrefslogtreecommitdiff
path: root/stacks/auth
diff options
context:
space:
mode:
authorRATDAD <lambda@disroot.org>2026-02-15 17:02:20 -0500
committerRATDAD <lambda@disroot.org>2026-02-15 17:02:20 -0500
commite82c1c7ab7c63d584a4ba1a89f86732717aec4f3 (patch)
tree379c607401ce754921e22a7fe7ecc6a1e0f36f4c /stacks/auth
parenta3f074fc780747f0cedfb8184502fc8e8834457a (diff)
downloadrd-cloud-e82c1c7ab7c63d584a4ba1a89f86732717aec4f3.tar.gz
rd-cloud-e82c1c7ab7c63d584a4ba1a89f86732717aec4f3.tar.bz2
rd-cloud-e82c1c7ab7c63d584a4ba1a89f86732717aec4f3.zip
Updated Authelia container template; added helper scripts
Diffstat (limited to 'stacks/auth')
-rw-r--r--stacks/auth/.gitignore7
-rw-r--r--stacks/auth/compose.cache.yml18
-rw-r--r--stacks/auth/compose.yml33
-rwxr-xr-xstacks/auth/secrets.sh17
-rw-r--r--stacks/auth/util/genhash.sh8
5 files changed, 0 insertions, 83 deletions
diff --git a/stacks/auth/.gitignore b/stacks/auth/.gitignore
deleted file mode 100644
index 52db271..0000000
--- a/stacks/auth/.gitignore
+++ /dev/null
@@ -1,7 +0,0 @@
-*.env
-config/
-config/*
-secrets/
-secrets/*
-compose.local.yml
-compose.cache.local.yml
diff --git a/stacks/auth/compose.cache.yml b/stacks/auth/compose.cache.yml
deleted file mode 100644
index 4c7727a..0000000
--- a/stacks/auth/compose.cache.yml
+++ /dev/null
@@ -1,18 +0,0 @@
-name: ${_STACK_1}
-
-networks:
- net:
- name: ${_NET_0}
- external: true
-
-services:
- servicename:
- container_name: ${_CONTAINER_1}
- image: redis:latest
- restart: unless-stopped
- env_file:
- - .env
- networks:
- - net
- expose:
- - 6379
diff --git a/stacks/auth/compose.yml b/stacks/auth/compose.yml
deleted file mode 100644
index e935946..0000000
--- a/stacks/auth/compose.yml
+++ /dev/null
@@ -1,33 +0,0 @@
-name: ${_STACK_0}
-
-networks:
- net:
- name: ${_NET_0}
- external: true
-
-secrets:
- JWT_SECRET:
- file: './secrets/JWT_SECRET'
- SESSION_SECRET:
- file: './secrets/SESSION_SECRET'
- STORAGE_ENCRYPTION:
- file: './secrets/STORAGE_ENCRYPTION'
- OIDC_HMAC_SECRET:
- file: './secrets/OIDC_HMAC_SECRET'
-
-services:
- auth:
- container_name: ${_CONTAINER_0}
- image: authelia/authelia:latest
- restart: unless-stopped
- user: '${UID}:${GID}'
- secrets: ['JWT_SECRET', 'SESSION_SECRET', 'STORAGE_ENCRYPTION', OIDC_HMAC_SECRET]
- env_file:
- - .auth.env # Runtime Vars
- - .env # Stack Vars
- volumes:
- - ./config/:/config
- networks:
- - net
- expose:
- - 9091
diff --git a/stacks/auth/secrets.sh b/stacks/auth/secrets.sh
deleted file mode 100755
index 19031da..0000000
--- a/stacks/auth/secrets.sh
+++ /dev/null
@@ -1,17 +0,0 @@
-#!/bin/bash
-
-USERS=(RATDAD)
-SECRETS=(SESSION_SECRET STORAGE_ENCRYPTION JWT_SECRET OIDC_HMAC_SECRET)
-SECRET_DIR=$PWD/secrets
-
-[ ! -d "$SECRET_DIR" ] && mkdir -p "$SECRET_DIR"
-
-# Generate secrets
-for filename in "${SECRETS[@]}"; do
- openssl rand -hex 64 > "$SECRET_DIR"/"$filename"
-done
-
-# Generate admin passwords
-for filename in "${USERS[@]}"; do
- openssl rand -hex 12 > "$SECRET_DIR"/"$filename"
-done
diff --git a/stacks/auth/util/genhash.sh b/stacks/auth/util/genhash.sh
deleted file mode 100644
index d8202ee..0000000
--- a/stacks/auth/util/genhash.sh
+++ /dev/null
@@ -1,8 +0,0 @@
-#!/bin/bash
-set -euo pipefail
-
-read -rp "Enter a password for the new user: " PASSWORD
-HASHED=$(docker run --rm authelia/authelia:latest authelia crypto hash generate argon2 --password "${PASSWORD}")
-
-printf "Password: %s\n" "${PASSWORD}"
-printf "Hash: %s\n" "${HASHED}"