mirror of
				https://github.com/optim-enterprises-bv/homelab.git
				synced 2025-11-04 03:47:45 +00:00 
			
		
		
		
	feat(authelia): enable 2FA
This commit is contained in:
		@@ -9,14 +9,11 @@ pod:
 | 
				
			|||||||
  kind: 'Deployment'
 | 
					  kind: 'Deployment'
 | 
				
			||||||
 | 
					
 | 
				
			||||||
configMap:
 | 
					configMap:
 | 
				
			||||||
 | 
					  default_2fa_method: totp
 | 
				
			||||||
  theme: 'dark'
 | 
					  theme: 'dark'
 | 
				
			||||||
 | 
					
 | 
				
			||||||
  access_control:
 | 
					  access_control:
 | 
				
			||||||
    # TODO: upgrade to 'two_factor'
 | 
					    default_policy: 'two_factor'
 | 
				
			||||||
    default_policy: 'one_factor'
 | 
					 | 
				
			||||||
    rules:
 | 
					 | 
				
			||||||
      - domain_regex: '^.*\.stonegarden.dev$'
 | 
					 | 
				
			||||||
        policy: 'one_factor'
 | 
					 | 
				
			||||||
 | 
					
 | 
				
			||||||
  authentication_backend:
 | 
					  authentication_backend:
 | 
				
			||||||
    ldap:
 | 
					    ldap:
 | 
				
			||||||
@@ -75,8 +72,7 @@ configMap:
 | 
				
			|||||||
            path: '/secrets/oidc-argocd/clientSecret'
 | 
					            path: '/secrets/oidc-argocd/clientSecret'
 | 
				
			||||||
          client_name: 'Argo CD'
 | 
					          client_name: 'Argo CD'
 | 
				
			||||||
          public: false
 | 
					          public: false
 | 
				
			||||||
          # TODO: upgrade to 'two_factor'
 | 
					          authorization_policy: 'two_factor'
 | 
				
			||||||
          authorization_policy: 'one_factor'
 | 
					 | 
				
			||||||
          redirect_uris:
 | 
					          redirect_uris:
 | 
				
			||||||
            - 'https://argocd.stonegarden.dev/auth/callback'
 | 
					            - 'https://argocd.stonegarden.dev/auth/callback'
 | 
				
			||||||
            - 'https://argocd.stonegarden.dev/applications'
 | 
					            - 'https://argocd.stonegarden.dev/applications'
 | 
				
			||||||
@@ -85,7 +81,7 @@ configMap:
 | 
				
			|||||||
        - client_id: 'argocd-cli'
 | 
					        - client_id: 'argocd-cli'
 | 
				
			||||||
          client_name: 'Argo CD (CLI)'
 | 
					          client_name: 'Argo CD (CLI)'
 | 
				
			||||||
          public: true
 | 
					          public: true
 | 
				
			||||||
          authorization_policy: 'one_factor'
 | 
					          authorization_policy: 'two_factor'
 | 
				
			||||||
          redirect_uris: [ 'http://localhost:8085/auth/callback' ]
 | 
					          redirect_uris: [ 'http://localhost:8085/auth/callback' ]
 | 
				
			||||||
          scopes: [ 'openid', 'groups', 'email', 'profile', 'offline_access' ]
 | 
					          scopes: [ 'openid', 'groups', 'email', 'profile', 'offline_access' ]
 | 
				
			||||||
          userinfo_signed_response_alg: 'none'
 | 
					          userinfo_signed_response_alg: 'none'
 | 
				
			||||||
 
 | 
				
			|||||||
		Reference in New Issue
	
	Block a user