diff options
| author | RATDAD <lambda@disroot.org> | 2026-02-15 17:02:20 -0500 |
|---|---|---|
| committer | RATDAD <lambda@disroot.org> | 2026-02-15 17:02:20 -0500 |
| commit | e82c1c7ab7c63d584a4ba1a89f86732717aec4f3 (patch) | |
| tree | 379c607401ce754921e22a7fe7ecc6a1e0f36f4c /stacks/auth | |
| parent | a3f074fc780747f0cedfb8184502fc8e8834457a (diff) | |
| download | rd-cloud-e82c1c7ab7c63d584a4ba1a89f86732717aec4f3.tar.gz rd-cloud-e82c1c7ab7c63d584a4ba1a89f86732717aec4f3.tar.bz2 rd-cloud-e82c1c7ab7c63d584a4ba1a89f86732717aec4f3.zip | |
Updated Authelia container template; added helper scripts
Diffstat (limited to 'stacks/auth')
| -rw-r--r-- | stacks/auth/.gitignore | 7 | ||||
| -rw-r--r-- | stacks/auth/compose.cache.yml | 18 | ||||
| -rw-r--r-- | stacks/auth/compose.yml | 33 | ||||
| -rwxr-xr-x | stacks/auth/secrets.sh | 17 | ||||
| -rw-r--r-- | stacks/auth/util/genhash.sh | 8 |
5 files changed, 0 insertions, 83 deletions
diff --git a/stacks/auth/.gitignore b/stacks/auth/.gitignore deleted file mode 100644 index 52db271..0000000 --- a/stacks/auth/.gitignore +++ /dev/null @@ -1,7 +0,0 @@ -*.env -config/ -config/* -secrets/ -secrets/* -compose.local.yml -compose.cache.local.yml diff --git a/stacks/auth/compose.cache.yml b/stacks/auth/compose.cache.yml deleted file mode 100644 index 4c7727a..0000000 --- a/stacks/auth/compose.cache.yml +++ /dev/null @@ -1,18 +0,0 @@ -name: ${_STACK_1} - -networks: - net: - name: ${_NET_0} - external: true - -services: - servicename: - container_name: ${_CONTAINER_1} - image: redis:latest - restart: unless-stopped - env_file: - - .env - networks: - - net - expose: - - 6379 diff --git a/stacks/auth/compose.yml b/stacks/auth/compose.yml deleted file mode 100644 index e935946..0000000 --- a/stacks/auth/compose.yml +++ /dev/null @@ -1,33 +0,0 @@ -name: ${_STACK_0} - -networks: - net: - name: ${_NET_0} - external: true - -secrets: - JWT_SECRET: - file: './secrets/JWT_SECRET' - SESSION_SECRET: - file: './secrets/SESSION_SECRET' - STORAGE_ENCRYPTION: - file: './secrets/STORAGE_ENCRYPTION' - OIDC_HMAC_SECRET: - file: './secrets/OIDC_HMAC_SECRET' - -services: - auth: - container_name: ${_CONTAINER_0} - image: authelia/authelia:latest - restart: unless-stopped - user: '${UID}:${GID}' - secrets: ['JWT_SECRET', 'SESSION_SECRET', 'STORAGE_ENCRYPTION', OIDC_HMAC_SECRET] - env_file: - - .auth.env # Runtime Vars - - .env # Stack Vars - volumes: - - ./config/:/config - networks: - - net - expose: - - 9091 diff --git a/stacks/auth/secrets.sh b/stacks/auth/secrets.sh deleted file mode 100755 index 19031da..0000000 --- a/stacks/auth/secrets.sh +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/bash - -USERS=(RATDAD) -SECRETS=(SESSION_SECRET STORAGE_ENCRYPTION JWT_SECRET OIDC_HMAC_SECRET) -SECRET_DIR=$PWD/secrets - -[ ! -d "$SECRET_DIR" ] && mkdir -p "$SECRET_DIR" - -# Generate secrets -for filename in "${SECRETS[@]}"; do - openssl rand -hex 64 > "$SECRET_DIR"/"$filename" -done - -# Generate admin passwords -for filename in "${USERS[@]}"; do - openssl rand -hex 12 > "$SECRET_DIR"/"$filename" -done diff --git a/stacks/auth/util/genhash.sh b/stacks/auth/util/genhash.sh deleted file mode 100644 index d8202ee..0000000 --- a/stacks/auth/util/genhash.sh +++ /dev/null @@ -1,8 +0,0 @@ -#!/bin/bash -set -euo pipefail - -read -rp "Enter a password for the new user: " PASSWORD -HASHED=$(docker run --rm authelia/authelia:latest authelia crypto hash generate argon2 --password "${PASSWORD}") - -printf "Password: %s\n" "${PASSWORD}" -printf "Hash: %s\n" "${HASHED}" |
