forked from coop-cloud/authentik
135 lines
5.1 KiB
Plaintext
135 lines
5.1 KiB
Plaintext
TYPE=authentik
|
|
TIMEOUT=900
|
|
ENABLE_AUTO_UPDATE=true
|
|
POST_DEPLOY_CMDS="worker set_admin_pass"
|
|
# Example values for post deploy cmds: "worker set_admin_pass|worker apply_blueprints|worker add_applications"
|
|
LETS_ENCRYPT_ENV=production
|
|
ENABLE_BACKUPS=true
|
|
|
|
DOMAIN=authentik.example.com
|
|
## Domain aliases
|
|
#EXTRA_DOMAINS=', `www.authentik.example.com`'
|
|
COMPOSE_FILE="compose.yml"
|
|
AUTHENTIK_DEFAULT_USER_CHANGE_USERNAME=false
|
|
AUTHENTIK_LOG_LEVEL=info
|
|
# AUTHENTIK_IMPERSONATION=true
|
|
# AUTHENTIK_FOOTER_LINKS='[{"name": "My Organization","href":"https://example.com"}]'
|
|
# WORKERS=1
|
|
|
|
## Outpost Integration
|
|
# COMPOSE_FILE="$COMPOSE_FILE:compose.outposts.yml"
|
|
# COMPOSE_FILE="$COMPOSE_FILE:compose.outposts.ldap.yml"
|
|
# SECRET_LDAP_TOKEN_VERSION=v1
|
|
|
|
## ADMIN
|
|
AUTHENTIK_BOOTSTRAP_EMAIL=admin@example.com
|
|
|
|
## EMAIL
|
|
AUTHENTIK_EMAIL__HOST=smtp
|
|
AUTHENTIK_EMAIL__PORT=587
|
|
AUTHENTIK_EMAIL__USERNAME="noreply@example.com"
|
|
AUTHENTIK_EMAIL__USE_TLS=true
|
|
AUTHENTIK_EMAIL__USE_SSL=false
|
|
AUTHENTIK_EMAIL__TIMEOUT=10
|
|
AUTHENTIK_EMAIL__FROM=noreply@example.com
|
|
|
|
## Secret Versions
|
|
SECRET_SECRET_KEY_VERSION=v1
|
|
SECRET_DB_PASSWORD_VERSION=v1
|
|
SECRET_ADMIN_TOKEN_VERSION=v1
|
|
SECRET_ADMIN_PASS_VERSION=v1
|
|
SECRET_EMAIL_PASS_VERSION=v1
|
|
|
|
# X_FRAME_OPTIONS_ALLOW_FROM=dashboard.example.org
|
|
|
|
## FLOW OPTIONS
|
|
# WELCOME_MESSAGE="Welcome to Authentik"
|
|
# DEFAULT_LANGUAGE=en
|
|
# LOGOUT_REDIRECT="https://$DOMAIN"
|
|
# EMAIL_SUBJECT="Account Recovery"
|
|
# EMAIL_TOKEN_EXPIRY_MINUTES=30
|
|
|
|
## assets
|
|
COPY_ASSETS="flow_background.jpg|app:/web/dist/assets/images/"
|
|
COPY_ASSETS="$COPY_ASSETS icon_left_brand.svg|app:/web/dist/assets/icons/"
|
|
COPY_ASSETS="$COPY_ASSETS icon.png|app:/web/dist/assets/icons/"
|
|
|
|
# store custom CSS in a css-volume
|
|
#COMPOSE_FILE="$COMPOSE_FILE:compose.css-volume.yml"
|
|
# NOTE: this causes the authentik container to run as `root` initially; it uses `su` to drop privileges but technically could introduce a security risk. proceed with caution!
|
|
|
|
# Default CSS customisation
|
|
# COMPOSE_FILE="$COMPOSE_FILE:compose.css.yml"
|
|
# BACKGROUND_FONT_COLOR=white
|
|
# BACKGROUND_BOX_COLOR='#eaeaeacf'
|
|
# THEME_BACKGROUND="url('https://authentik.example.com/static/dist/assets/images/flow_background.jpg'); background-position: center; background-repeat: no-repeat; background-size: cover;"
|
|
|
|
# COMPOSE_FILE="$COMPOSE_FILE:compose.nextcloud.yml"
|
|
# NEXTCLOUD_DOMAIN=nextcloud.example.com
|
|
# SECRET_NEXTCLOUD_ID_VERSION=v1
|
|
# SECRET_NEXTCLOUD_SECRET_VERSION=v1
|
|
# APP_ICONS="nextcloud:~/.abra/recipes/authentik/icons/nextcloud.png"
|
|
|
|
# COMPOSE_FILE="$COMPOSE_FILE:compose.wordpress.yml"
|
|
# WORDPRESS_DOMAIN=wordpress.example.com
|
|
# WORDPRESS_GROUP='wordpress Admins'
|
|
# SECRET_WORDPRESS_ID_VERSION=v1
|
|
# SECRET_WORDPRESS_SECRET_VERSION=v1
|
|
# APP_ICONS="$APP_ICONS wordpress:~/.abra/recipes/authentik/icons/wordpress.png"
|
|
|
|
# COMPOSE_FILE="$COMPOSE_FILE:compose.matrix.yml"
|
|
# ELEMENT_DOMAIN=element-web.example.com
|
|
# MATRIX_DOMAIN=matrix-synapse.example.com
|
|
# SECRET_MATRIX_ID_VERSION=v1
|
|
# SECRET_MATRIX_SECRET_VERSION=v1
|
|
# APP_ICONS="$APP_ICONS matrix:~/.abra/recipes/authentik/icons/matrix.svg"
|
|
|
|
# COMPOSE_FILE="$COMPOSE_FILE:compose.wekan.yml"
|
|
# WEKAN_DOMAIN=wekan.example.com
|
|
# SECRET_WEKAN_ID_VERSION=v1
|
|
# SECRET_WEKAN_SECRET_VERSION=v1
|
|
# APP_ICONS="$APP_ICONS wekan:~/.abra/recipes/authentik/icons/wekan.png"
|
|
|
|
# COMPOSE_FILE="$COMPOSE_FILE:compose.vikunja.yml"
|
|
# VIKUNJA_DOMAIN=vikunja.example.com
|
|
# SECRET_VIKUNJA_ID_VERSION=v1
|
|
# SECRET_VIKUNJA_SECRET_VERSION=v1
|
|
# APP_ICONS="$APP_ICONS vikunja:~/.abra/recipes/authentik/icons/vikunja.svg"
|
|
|
|
# COMPOSE_FILE="$COMPOSE_FILE:compose.outline.yml"
|
|
# OUTLINE_DOMAIN=outline.example.com
|
|
# SECRET_OUTLINE_ID_VERSION=v1
|
|
# SECRET_OUTLINE_SECRET_VERSION=v1
|
|
# APP_ICONS="$APP_ICONS outline:~/.abra/recipes/authentik/icons/outline.png"
|
|
|
|
# COMPOSE_FILE="$COMPOSE_FILE:compose.kimai.yml"
|
|
# KIMAI_DOMAIN=kimai.example.com
|
|
# SECRET_KIMAI_ID_VERSION=v1
|
|
# SECRET_KIMAI_SECRET_VERSION=v1
|
|
# APP_ICONS="$APP_ICONS kimai:~/.abra/recipes/authentik/icons/kimai_logo.png"
|
|
|
|
# COMPOSE_FILE="$COMPOSE_FILE:compose.zammad.yml"
|
|
# ZAMMAD_DOMAIN=zammad.example.com
|
|
# APP_ICONS="$APP_ICONS zammad:~/.abra/recipes/authentik/icons/zammad.svg"
|
|
|
|
# COMPOSE_FILE="$COMPOSE_FILE:compose.monitoring.yml"
|
|
# MONITORING_DOMAIN=monitoring.example.com
|
|
# SECRET_MONITORING_ID_VERSION=v1
|
|
# SECRET_MONITORING_SECRET_VERSION=v1
|
|
# APP_ICONS="$APP_ICONS monitoring:~/.abra/recipes/authentik/icons/monitoring.svg"
|
|
|
|
# COMPOSE_FILE="$COMPOSE_FILE:compose.rallly.yml"
|
|
# RALLLY_DOMAIN=rallly.example.com
|
|
# SECRET_RALLLY_ID_VERSION=v1
|
|
# SECRET_RALLLY_SECRET_VERSION=v1
|
|
# APP_ICONS="$APP_ICONS rallly:~/.abra/recipes/authentik/icons/rallly.png"
|
|
|
|
# COMPOSE_FILE="$COMPOSE_FILE:compose.hedgedoc.yml"
|
|
# HEDGEDOC_DOMAIN=hedgedoc.example.com
|
|
# SECRET_HEDGEDOC_ID_VERSION=v1
|
|
# SECRET_HEDGEDOC_SECRET_VERSION=v1
|
|
# APP_ICONS="$APP_ICONS hedgedoc:~/.abra/recipes/authentik/icons/hedgedoc.png"
|
|
|
|
# APPLICATIONS='{"Calendar": "https://nextcloud.example.com/apps/calendar/", "BBB": "https://nextcloud.example.com/apps/bbb/", "Pretix": "https://pretix.example.com/control/"}'
|
|
# EXTRA_ICONS={"Calendar": "~/.abra/recipes/authentik/icons/calendar.svg", "BBB": "~/.abra/recipes/authentik/icons/bbb.png", "Pretix": "~/.abra/recipes/authentik/icons/pretix.svg"}
|