feat: authelia use external secrets from vault

This commit is contained in:
2026-06-22 11:51:06 +00:00
parent a96758620c
commit d276ef403a
2 changed files with 44 additions and 4 deletions
+14 -4
View File
@@ -11,7 +11,7 @@ configMap:
identity_validation:
reset_password:
secret:
value: f86cac59ff096d5dba433b5242eef1c409421165fe3ad7414827f71382ad0e84
path: /secrets/authelia-secrets/AUTHELIA_IDENTITY_VALIDATION_RESET_PASSWORD_JWT_SECRET_FILE
notifier:
disable_startup_check: true
filesystem:
@@ -23,20 +23,20 @@ configMap:
domain: uzbutterfly.com
subdomain: auth
encryption_key:
value: 03e75899a8f009bb3c1877c63a864f37f7e38fed0fabd599eb871d259ac86148
path: /secrets/authelia-secrets/AUTHELIA_SESSION_SECRET_FILE
redis:
enabled: true
host: authelia-redis-master
port: 6379
storage:
encryption_key:
value: 0b1bbffd77ba566e6441dcb848d6b25a165443d339d356482f86b6dcedc39c79
path: /secrets/authelia-secrets/AUTHELIA_STORAGE_ENCRYPTION_KEY_FILE
postgres:
address: tcp://authelia-postgres-postgresql:5432
database: authelia
enabled: true
password:
value: authelia_pg_pass
path: /secrets/authelia-secrets/AUTHELIA_STORAGE_POSTGRES_PASSWORD_FILE
username: authelia
theme: dark
totp:
@@ -57,3 +57,13 @@ secret:
items:
- key: users.yml
path: users.yml
authelia-secrets:
items:
- key: AUTHELIA_IDENTITY_VALIDATION_RESET_PASSWORD_JWT_SECRET_FILE
path: AUTHELIA_IDENTITY_VALIDATION_RESET_PASSWORD_JWT_SECRET_FILE
- key: AUTHELIA_SESSION_SECRET_FILE
path: AUTHELIA_SESSION_SECRET_FILE
- key: AUTHELIA_STORAGE_ENCRYPTION_KEY_FILE
path: AUTHELIA_STORAGE_ENCRYPTION_KEY_FILE
- key: AUTHELIA_STORAGE_POSTGRES_PASSWORD_FILE
path: AUTHELIA_STORAGE_POSTGRES_PASSWORD_FILE