misc/ansible-base
0
0
Fork 0
Code Issues Pull requests 1 Actions Packages Projects Releases Wiki Activity

[int]

Browse source
This commit is contained in:
Christian Fraß 2025-10-07 15:58:18 +02:00
parent 50aa1eabaa
commit 4a439cf375
4 changed files with 476 additions and 249 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

388
roles/authelia/cfg.schema.json Normal file
View file

@ -0,0 +1,388 @@
{
"nullable": false,
"type": "object",
"properties": {
"listen_address": {
"nullable": false,
"type": "string",
"default": "0.0.0.0"
},
"jwt_secret": {
"nullable": false,
"type": "string"
},
"users_file_path": {
"nullable": false,
"type": "string",
"default": "/var/authelia/users.yml"
},
"log_file_path": {
"nullable": false,
"type": "string",
"default": "/var/authelia/log.jsonl"
},
"domain": {
"nullable": false,
"type": "string",
"default": "authelia.example.org"
},
"redirect_url": {
"nullable": false,
"type": "string",
"default": "https://example.org"
},
"session_domain": {
"nullable": false,
"type": "string",
"default": "example.org"
},
"session_secret": {
"nullable": false,
"type": "string"
},
"storage_encryption_key": {
"nullable": false,
"type": "string"
},
"storage": {
"anyOf": [
{
"nullable": false,
"type": "object",
"properties": {
"kind": {
"nullable": false,
"type": "string",
"enum": ["sqlite"]
},
"data": {
"nullable": false,
"type": "object",
"properties": {
"path": {
"nullable": false,
"type": "string",
"default": "/var/authelia/state.db"
}
},
"additionalProperties": false,
"required": [
],
"default": {
}
}
},
"additionalProperties": false,
"required": [
"kind"
]
},
{
"nullable": false,
"type": "object",
"properties": {
"kind": {
"nullable": false,
"type": "string",
"enum": ["postgresql"]
},
"data": {
"nullable": false,
"type": "object",
"properties": {
"host": {
"nullable": false,
"type": "string",
"ddefault": "localhost"
},
"port": {
"nullable": false,
"type": "integer",
"default": 5432
},
"username": {
"nullable": false,
"type": "string",
"default": "authelia_user"
},
"password": {
"nullable": false,
"type": "string"
},
"schema": {
"nullable": false,
"type": "string",
"default": "authelia"
}
},
"additionalProperties": false,
"required": [
"password"
]
}
},
"additionalProperties": false,
"required": [
"kind",
"data"
]
},
{
"nullable": false,
"type": "object",
"properties": {
"kind": {
"nullable": false,
"type": "string",
"enum": ["mariadb"]
},
"data": {
"nullable": false,
"type": "object",
"properties": {
"host": {
"nullable": false,
"type": "string",
"ddefault": "localhost"
},
"port": {
"nullable": false,
"type": "integer",
"default": 3306
},
"username": {
"nullable": false,
"type": "string",
"default": "authelia_user"
},
"password": {
"nullable": false,
"type": "string"
},
"schema": {
"nullable": false,
"type": "string",
"default": "authelia"
}
},
"additionalProperties": false,
"required": [
"password"
]
}
},
"additionalProperties": false,
"required": [
"kind",
"data"
]
}
]
},
"ntp_server": {
"nullable": false,
"type": "string",
"mandatory": false
},
"password_reset": {
"nullable": false,
"type": "object",
"properties": {
"enabled": {
"nullable": false,
"type": "boolean",
"default": false
},
"custom_url": {
"nullable": true,
"type": "string",
"default": null
}
},
"additionalProperties": false,
"required": [
],
"default": {
}
},
"notification": {
"anyOf": [
{
"nullable": false,
"type": "object",
"properties": {
"kind": {
"nullable": false,
"type": "string",
"enum": ["file"]
},
"data": {
"nullable": false,
"type": "object",
"properties": {
},
"additionalProperties": false,
"required": [
],
"default": {
}
}
},
"additionalProperties": false,
"required": [
"kind"
]
},
{
"nullable": false,
"type": "object",
"properties": {
"kind": {
"nullable": false,
"type": "string",
"enum": ["smtp"]
},
"data": {
"nullable": false,
"type": "object",
"properties": {
"host": {
"nullable": false,
"type": "string",
"default": "smtp.example.org"
},
"port": {
"nullable": false,
"type": "integer",
"default": 465
},
"username": {
"nullable": false,
"type": "string",
"default": "authelia"
},
"password": {
"nullable": false,
"type": "string"
},
"sender": {
"nullable": false,
"type": "string",
"default": "authelia@example.org"
}
},
"additionalProperties": false,
"required": [
"password"
]
}
},
"additionalProperties": false,
"required": [
"kind",
"data"
]
}
]
},
"oidc": {
"nullable": false,
"type": "object",
"properties": {
"hmac_secret": {
"nullable": false,
"type": "string"
},
"lifespan": {
"nullable": false,
"type": "object",
"properties": {
"default": {
"nullable": false,
"type": "object",
"properties": {
"access_token": {
"nullable": false,
"type": "string",
"default": "1h"
},
"refresh_token": {
"nullable": false,
"type": "string",
"default": "1m"
}
},
"additionalProperties": false,
"required": [
],
"default": {
}
},
"custom": {
"nullable": false,
"type": "object",
"properties": {
},
"additionalProperties": {
"nullable": false,
"type": "object",
"properties": {
"access_token": {
"nullable": false,
"type": "string"
},
"refresh_token": {
"nullable": false,
"type": "string"
}
},
"additionalProperties": false,
"required": [
"acces_token",
"refresh_token"
]
},
"required": [
],
"default": {
}
}
},
"additionalProperties": false,
"required": [
],
"default": {
}
},
"cors_endpoints": {
"nullable": true,
"type": "array",
"items": {
"nullable": false,
"type": "string",
"enum": [
"authorization",
"pushed-authorization-request",
"token",
"revocation",
"introspection",
"userinfo"
]
},
"default": null
}
},
"additionalProperties": false,
"required": [
"hmac_secret"
]
}
},
"additionalProperties": false,
"required": [
"jwt_secret",
"session_secret",
"storage_encryption_key",
"oidc"
]
}

87
roles/authelia/defaults/main.json
View file

@ -1,39 +1,52 @@
{ {
"var_authelia_version": "4.37.5", "cfg_authelia_defaults": {
"var_authelia_architecture": "amd64", "listen_address": "0.0.0.0",
"var_authelia_listen_address": "0.0.0.0", "users_file_path": "/var/authelia/users.yml",
"var_authelia_jwt_secret": "REPLACE_ME", "log_file_path": "/var/authelia/log.jsonl",
"var_authelia_users_file_path": "/var/authelia/users.yml", "domain": "authelia.example.org",
"var_authelia_log_file_path": "/var/authelia/log.jsonl", "redirect_url": "https://example.org",
"var_authelia_domain": "authelia.example.org", "session_domain": "example.org",
"var_authelia_redirect_url": "https://example.org", "storage": {
"var_authelia_session_domain": "example.org", "kind": "sqlite",
"var_authelia_session_secret": "REPLACE_ME", "data": {
"var_authelia_storage_encryption_key": "REPLACE_ME", "sqlite": {
"var_authelia_storage_kind": "sqlite", "path": "/var/authelia/state.db"
"var_authelia_storage_data_sqlite_path": "/var/authelia/state.db", },
"var_authelia_storage_data_postgresql_host": "localhost", "postgresql": {
"var_authelia_storage_data_postgresql_port": 5432, "host": "localhost",
"var_authelia_storage_data_postgresql_username": "authelia_user", "port": 5432,
"var_authelia_storage_data_postgresql_password": "REPLACE_ME", "username": "authelia_user",
"var_authelia_storage_data_postgresql_schema": "authelia", "schema": "authelia"
"var_authelia_storage_data_mariadb_host": "localhost", },
"var_authelia_storage_data_mariadb_port": 3306, "mariadb": {
"var_authelia_storage_data_mariadb_username": "authelia_user", "host": "localhost",
"var_authelia_storage_data_mariadb_password": "REPLACE_ME", "port": 3306,
"var_authelia_storage_data_mariadb_schema": "authelia", "username": "authelia_user",
"var_authelia_ntp_server": "time.cloudflare.com:123", "schema": "authelia"
"var_authelia_password_reset_enabled": false, }
"var_authelia_password_reset_custom_url": null, }
"var_authelia_notification_mode": "smtp", },
"var_authelia_notification_file_path": "/var/authelia/notifications", "ntp_server": "time.cloudflare.com:123",
"var_authelia_notification_smtp_host": "smtp.example.org", "password_reset": {
"var_authelia_notification_smtp_port": 465, "enabled": false,
"var_authelia_notification_smtp_username": "authelia", "custom_url": null
"var_authelia_notification_smtp_password": "REPLACE_ME", },
"var_authelia_notification_smtp_sender": "authelia@example.org", "notification": {
"var_authelia_oidc_hmac_secret": "REPLACE_ME", "kind": "file",
"var_authelia_oidc_lifespan_access_token": "1h", "data": {
"var_authelia_oidc_lifespan_refresh_token": "1m", "path": "/var/authelia/notifications"
"var_authelia_oidc_cors_endpoints": null }
},
"oidc": {
"lifespan": {
"default": {
"access_token": "1d",
"refresh_token": "1h"
},
"custom": {
}
},
"cors_endpoints": null
}
}
} }

81
roles/authelia/templates/conf-main.json.j2
View file

@ -2,12 +2,12 @@
"theme": "auto", "theme": "auto",
"identity_validation": { "identity_validation": {
"reset_password": { "reset_password": {
"jwt_secret": "{{var_authelia_jwt_secret}}" "jwt_secret": "{{cfg_authelia.jwt_secret}}"
} }
}, },
"default_2fa_method": "totp", "default_2fa_method": "totp",
"server": { "server": {
"address": "{{var_authelia_listen_address}}:9091", "address": "{{cfg_authelia.listen_address}}:9091",
"endpoints": { "endpoints": {
"enable_pprof": false, "enable_pprof": false,
"enable_expvars": false "enable_expvars": false
@ -17,7 +17,7 @@
"log": { "log": {
"level": "info", "level": "info",
"format": "json", "format": "json",
"file_path": "{{var_authelia_log_file_path}}", "file_path": "{{cfg_authelia.log_file_path}}",
"keep_stdout": false "keep_stdout": false
}, },
"telemetry": { "telemetry": {
@ -43,7 +43,7 @@
"user_verification": "preferred" "user_verification": "preferred"
}, },
"ntp": { "ntp": {
"address": "{{var_authelia_ntp_server}}", "address": "{{cfg_authelia.ntp_server}}",
"version": 4, "version": 4,
"max_desync": "3s", "max_desync": "3s",
"disable_startup_check": false, "disable_startup_check": false,
@ -51,16 +51,16 @@
}, },
"authentication_backend": { "authentication_backend": {
"password_reset": { "password_reset": {
{% if var_authelia_password_reset_enabled %} {% if cfg_authelia.password_reset.enabled %}
"disable": false, "disable": false,
{% else %} {% else %}
"disable": true, "disable": true,
{% endif %} {% endif %}
"custom_url": "{{var_authelia_password_reset_custom_url}}" "custom_url": "{{cfg_authelia.password_reset.custom_url}}"
}, },
"refresh_interval": "5m", "refresh_interval": "5m",
"file": { "file": {
"path": "{{var_authelia_users_file_path}}", "path": "{{cfg_authelia.users_file_path}}",
"watch": true, "watch": true,
"search": { "search": {
"email": false, "email": false,
@ -121,15 +121,15 @@
"session": { "session": {
"name": "authelia_session", "name": "authelia_session",
"same_site": "lax", "same_site": "lax",
"secret": "{{var_authelia_session_secret}}", "secret": "{{cfg_authelia.session_secret}}",
"expiration": "1h", "expiration": "1h",
"inactivity": "5m", "inactivity": "5m",
"remember_me": "1M", "remember_me": "1M",
"cookies": [ "cookies": [
{ {
"domain": "{{var_authelia_session_domain}}", "domain": "{{cfg_authelia.session_domain}}",
"authelia_url": "https://{{var_authelia_domain}}/", "authelia_url": "https://{{cfg_authelia.domain}}/",
"default_redirection_url": "{{var_authelia_redirect_url}}" "default_redirection_url": "{{cfg_authelia.redirect_url}}"
} }
] ]
}, },
@ -139,44 +139,44 @@
"ban_time": "5m" "ban_time": "5m"
}, },
"storage": { "storage": {
"encryption_key": "{{var_authelia_storage_encryption_key}}", "encryption_key": "{{cfg_authelia.storage_encryption_key}}",
{% if var_authelia_storage_kind == "sqlite" %} {% if cfg_authelia.storage.kind == "sqlite" %}
"local": { "local": {
"path": "{{var_authelia_storage_data_sqlite_path}}" "path": "{{cfg_authelia.storage.data.path}}"
} }
{% endif %} {% endif %}
{% if var_authelia_storage_kind == "postgresql" %} {% if cfg_authelia.storage.kind == "postgresql" %}
"postgres": { "postgres": {
"address": "{{var_authelia_storage_data_postgresql_host}}:{{var_authelia_storage_data_postgresql_port | string}}", "address": "{{cfg_authelia.storage.data.host}}:{{cfg_authelia.storage.data.port | string}}",
"schema": "public", "schema": "public",
"username": "{{var_authelia_storage_data_postgresql_username}}", "username": "{{cfg_authelia.storage.data.username}}",
"password": "{{var_authelia_storage_data_postgresql_password}}", "password": "{{cfg_authelia.storage.data.password}}",
"database": "{{var_authelia_storage_data_postgresql_schema}}" "database": "{{cfg_authelia.storage.data.schema}}"
} }
{% endif %} {% endif %}
{% if var_authelia_storage_kind == "mariadb" %} {% if cfg_authelia.storage_kind == "mariadb" %}
"mysql": { "mysql": {
"host": "{{var_authelia_storage_data_mariadb_host}}", "host": "{{cfg_authelia.storage.data.host}}",
"port": {{var_authelia_storage_data_mariadb_port | string}}, "port": {{cfg_authelia.storage.data.port | string}},
"username": "{{var_authelia_storage_data_mariadb_username}}", "username": "{{cfg_authelia.storage.data.username}}",
"password": "{{var_authelia_storage_data_mariadb_password}}", "password": "{{cfg_authelia.storage.data.password}}",
"database": "{{var_authelia_storage_data_mariadb_schema}}" "database": "{{cfg_authelia.storage.data.schema}}"
} }
{% endif %} {% endif %}
}, },
"notifier": { "notifier": {
"disable_startup_check": true, "disable_startup_check": true,
{% if var_authelia_notification_mode == "file" %} {% if cfg_authelia.notification.kind == "file" %}
"filesystem": { "filesystem": {
"filename": "{{var_authelia_notification_file_path}}" "filename": "{{cfg_authelia.notification.data.path}}"
} }
{% endif %} {% endif %}
{% if var_authelia_notification_mode == "smtp" %} {% if cfg_authelia.notification_mode == "smtp" %}
"smtp": { "smtp": {
"address": "{{var_authelia_notification_smtp_host}}:{{var_authelia_notification_smtp_port | string}}", "address": "{{cfg_authelia.notification.data.host}}:{{cfg_authelia.notification.data.port | string}}",
"username": "{{var_authelia_notification_smtp_username}}", "username": "{{cfg_authelia.notification.data.username}}",
"password": "{{var_authelia_notification_smtp_password}}", "password": "{{cfg_authelia.notification.data.password}}",
"sender": "{{var_authelia_notification_smtp_sender}}", "sender": "{{cfg_authelia.notification.data.sender}}",
"disable_require_tls": false, "disable_require_tls": false,
"disable_html_emails": false, "disable_html_emails": false,
"tls": { "tls": {
@ -187,7 +187,7 @@
}, },
"identity_providers": { "identity_providers": {
"oidc": { "oidc": {
"hmac_secret": "{{var_authelia_oidc_hmac_secret}}", "hmac_secret": "{{cfg_authelia.oidc.hmac_secret}}",
"jwks": [ "jwks": [
{ {
"algorithm": "RS256", "algorithm": "RS256",
@ -195,20 +195,15 @@
} }
], ],
"lifespans": { "lifespans": {
"access_token": "{{var_authelia_oidc_lifespan_access_token}}", "access_token": "{{cfg_authelia.oidc.lifespan.default.access_token}}",
"refresh_token": "{{var_authelia_oidc_lifespan_refresh_token}}", "refresh_token": "{{cfg_authelia.oidc.lifespan.default.refresh_token}}",
"custom": { "custom": "{{cfg_authelia.oidc.lifespan.custom | to_json}}",
"ocis": {
"access_token": "2d",
"refresh_token": "3d"
}
}
}, },
"cors": { "cors": {
"allowed_origins_from_client_redirect_uris": true "allowed_origins_from_client_redirect_uris": true
{% if var_authelia_oidc_cors_endpoints == None %} {% if cfg_authelia.oidc.cors_endpoints == None %}
{% else %} {% else %}
,"endpoints": {{var_authelia_oidc_cors_endpoints | to_json}} ,"endpoints": {{cfg_authelia.oidc.cors_endpoints | to_json}}
{% endif %} {% endif %}
}, },
"clients": [ "clients": [

169
roles/authelia/vardef.json
View file

@ -1,169 +0,0 @@
{
"version": {
"type": "string",
"mandatory": false
},
"architecture": {
"type": "string",
"mandatory": false
},
"listen_address": {
"type": "string",
"mandatory": false
},
"jwt_secret": {
"type": "string",
"mandatory": true
},
"users_file_path": {
"type": "string",
"mandatory": false
},
"log_file_path": {
"type": "string",
"mandatory": false
},
"domain": {
"type": "string",
"mandatory": false
},
"redirect_url": {
"type": "string",
"mandatory": false
},
"session_domain": {
"type": "string",
"mandatory": false
},
"session_secret": {
"type": "string",
"mandatory": true
},
"storage_encryption_key": {
"type": "string",
"mandatory": true
},
"storage_kind": {
"type": "string",
"mandatory": false
},
"storage_data_sqlite_path": {
"type": "string",
"mandatory": false
},
"storage_data_postgresql_host": {
"type": "string",
"mandatory": false
},
"storage_data_postgresql_port": {
"type": "integer",
"mandatory": false
},
"storage_data_postgresql_username": {
"type": "string",
"mandatory": false
},
"storage_data_postgresql_password": {
"type": "string",
"mandatory": false
},
"storage_data_postgresql_schema": {
"type": "string",
"mandatory": false
},
"storage_data_mariadb_host": {
"type": "string",
"mandatory": false
},
"storage_data_mariadb_port": {
"type": "integer",
"mandatory": false
},
"storage_data_mariadb_username": {
"type": "string",
"mandatory": false
},
"storage_data_mariadb_password": {
"type": "string",
"mandatory": false
},
"storage_data_mariadb_schema": {
"type": "string",
"mandatory": false
},
"ntp_server": {
"type": "string",
"mandatory": false
},
"password_reset_enabled": {
"type": "boolean",
"mandatory": false
},
"password_reset_custom_url": {
"nullable": true,
"type": "string",
"mandatory": false
},
"notification_mode": {
"type": "string",
"mandatory": false,
"options": [
"file",
"smtp"
]
},
"notification_file_path": {
"type": "string",
"mandatory": false
},
"notification_smtp_host": {
"type": "string",
"mandatory": false
},
"notification_smtp_port": {
"type": "integer",
"mandatory": false
},
"notification_smtp_username": {
"type": "string",
"mandatory": false
},
"notification_smtp_password": {
"type": "string",
"mandatory": false
},
"notification_smtp_sender": {
"type": "string",
"mandatory": false
},
"oidc_hmac_secret": {
"type": "string",
"mandatory": true
},
"oidc_lifespan_access_token": {
"nullable": true,
"type": "string",
"mandatory": false
},
"oidc_lifespan_refresh_token": {
"nullable": true,
"type": "string",
"mandatory": false
},
"oidc_cors_endpoints": {
"nullable": true,
"type": "array",
"items": {
"type": "string",
"enum": [
"authorization",
"pushed-authorization-request",
"token",
"revocation",
"introspection",
"userinfo"
]
},
"mandatory": false
}
}