refactor: make Authelia user management scalable

- Remove envsubst complexity for password hashes
- Keep users_database.yml only on server (not in git)
- Add users_database.yml to .gitignore
- Update users_database.template.yml with multi-user examples
- Configure Authelia to watch users_database.yml for changes
- Users can now be added/removed by editing the file on server
- Supports unlimited users without code changes
This commit is contained in:
2025-11-15 19:59:17 +01:00
parent 37f1edbd01
commit 94e6656f31
5 changed files with 19 additions and 9 deletions

View File

@@ -275,13 +275,9 @@ services:
AUTHELIA_JWT_SECRET: ${AUTHELIA_JWT_SECRET}
AUTHELIA_SESSION_SECRET: ${AUTHELIA_SESSION_SECRET}
AUTHELIA_STORAGE_ENCRYPTION_KEY: ${AUTHELIA_STORAGE_ENCRYPTION_KEY}
AUTHELIA_USER_PASSWORD_HASH: ${AUTHELIA_USER_PASSWORD_HASH}
volumes:
- authelia_config:/config
- ./authelia:/etc/authelia:ro
command: >
sh -c "envsubst < /etc/authelia/users_database.template.yml > /config/users_database.yml &&
authelia --config /etc/authelia/configuration.yml"
networks:
- compose_network
labels: