Skull-IT/iac_stack
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

add Authelia Authentification

Browse source
This commit is contained in:
= 2025-07-18 11:21:08 +02:00
parent ff5d88f8ab
commit 6c88377d76
2 changed files with 7 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
ansible/roles/deploy_container_traefik/defaults/main.yml
View file

@ -8,6 +8,7 @@ container_traefik_san_domains:
- "example.org" - "example.org"
container_traefik_cloudflare_mail: "your-email@example.com" container_traefik_cloudflare_mail: "your-email@example.com"
container_traefik_cloudflare_token: "your-cloudflare-token" container_traefik_cloudflare_token: "your-cloudflare-token"
container_traefik_auth: 'basic' # basic or sso
container_traefik_basicauth_user: "admin" container_traefik_basicauth_user: "admin"
container_traefik_basicauth_password: "yourpassword" container_traefik_basicauth_password: "yourpassword"

8
ansible/roles/deploy_container_traefik/templates/docker-compose.yml.j2
View file

@ -28,8 +28,6 @@ services:
- "traefik.http.middlewares.sslheader.headers.customrequestheaders.X-Forwarded-Proto=https" - "traefik.http.middlewares.sslheader.headers.customrequestheaders.X-Forwarded-Proto=https"
- "traefik.http.routers.traefik.middlewares=traefik-https-redirect" - "traefik.http.routers.traefik.middlewares=traefik-https-redirect"
- "traefik.http.routers.traefik-secure.entrypoints=https" - "traefik.http.routers.traefik-secure.entrypoints=https"
- "traefik.http.middlewares.basic-auth.basicauth.users=${TRAEFIK_BASICAUTH_USER}:${TRAEFIK_BASICAUTH_PASSWORD}"
- "traefik.http.routers.traefik-secure.middlewares=basic-auth"
- "traefik.http.routers.traefik-secure.rule=Host(`${TRAEFIK_DOMAIN}`)" - "traefik.http.routers.traefik-secure.rule=Host(`${TRAEFIK_DOMAIN}`)"
- "traefik.http.routers.traefik-secure.tls=true" - "traefik.http.routers.traefik-secure.tls=true"
- "traefik.http.routers.traefik-secure.tls.certresolver=cloudflare" - "traefik.http.routers.traefik-secure.tls.certresolver=cloudflare"
@ -38,6 +36,12 @@ services:
- "traefik.http.routers.traefik-secure.tls.domains[{{ loop.index0 }}].sans=*.{{ domain }}" - "traefik.http.routers.traefik-secure.tls.domains[{{ loop.index0 }}].sans=*.{{ domain }}"
{% endfor %} {% endfor %}
- "traefik.http.routers.traefik-secure.service=api@internal" - "traefik.http.routers.traefik-secure.service=api@internal"
{% if container_traefik_auth == 'sso' %}
- "traefik.http.routers.traefik-secure.middlewares=authelia@docker"
{% elif container_traefik_auth == 'basic' or container_traefik_auth is not defined %}
- "traefik.http.routers.traefik-secure.middlewares=basic-auth"
- "traefik.http.middlewares.basic-auth.basicauth.users=${TRAEFIK_BASICAUTH_USER}:${TRAEFIK_BASICAUTH_PASSWORD}"
{% endif %}
networks: networks:
traefik: traefik: