roles/authelia/cfg.schema.json

@@ -369,7 +369,13 @@
 							"userinfo"
 						]
 					},
-					"default": null
+					"default": [
+						"authorization",
+						"token",
+						"revocation",
+						"introspection",
+						"userinfo"
+					]
 				}
 			},
 			"additionalProperties": false,

roles/authelia/defaults/main.json

@@ -46,7 +46,13 @@
 				"custom": {
 				}
 			},
-			"cors_endpoints": null
+			"cors_endpoints": [
+				"authorization",
+				"token",
+				"revocation",
+				"introspection",
+				"userinfo"
+			]
 		}
 	}
 }

roles/nginx/defaults/main.json

@@ -1,3 +1,4 @@
 {
-	"var_nginx_auto_reload_interval": null
+	"var_nginx_auto_reload_interval": null,
+	"var_nginx_dhparam_size": 2048
 }

roles/nginx/tasks/main.json

@@ -14,7 +14,7 @@
 		"name": "generate dhparams file",
 		"become": true,
 		"ansible.builtin.command": {
-			"cmd": "openssl dhparam -out /etc/nginx/dhparam 4096"
+			"cmd": "openssl dhparam -out /etc/nginx/dhparam {{var_nginx_dhparam_size | string}}"
 		},
 		"args": {
 			"creates": "/etc/nginx/dhparam"