feat: add Authelia SSO authentication service
- Add Authelia service to NET stack for centralized SSO - Create configuration.yml with PostgreSQL storage - Create users_database.yml for file-based user management - Add authelia database to PostgreSQL init script - Configure Traefik ForwardAuth middleware - Add environment variables to arty.yml - Supports TOTP and WebAuthn 2FA - Email notifications via Mailpit SMTP relay - Protected services: netdata, mailpit, scrapy, restic, traefik, dev, n8n, asciinema, coolify
This commit is contained in:
@@ -49,6 +49,10 @@ psql -v ON_ERROR_STOP=1 --username "$POSTGRES_USER" --dbname "$POSTGRES_DB" <<-E
|
||||
SELECT 'CREATE DATABASE coolify'
|
||||
WHERE NOT EXISTS (SELECT FROM pg_database WHERE datname = 'coolify')\\gexec
|
||||
|
||||
-- Authelia SSO authentication database
|
||||
SELECT 'CREATE DATABASE authelia'
|
||||
WHERE NOT EXISTS (SELECT FROM pg_database WHERE datname = 'authelia')\\gexec
|
||||
|
||||
-- Grant privileges to all databases
|
||||
GRANT ALL PRIVILEGES ON DATABASE directus TO $POSTGRES_USER;
|
||||
GRANT ALL PRIVILEGES ON DATABASE umami TO $POSTGRES_USER;
|
||||
@@ -60,11 +64,12 @@ psql -v ON_ERROR_STOP=1 --username "$POSTGRES_USER" --dbname "$POSTGRES_DB" <<-E
|
||||
GRANT ALL PRIVILEGES ON DATABASE asciinema TO $POSTGRES_USER;
|
||||
GRANT ALL PRIVILEGES ON DATABASE gitea TO $POSTGRES_USER;
|
||||
GRANT ALL PRIVILEGES ON DATABASE coolify TO $POSTGRES_USER;
|
||||
GRANT ALL PRIVILEGES ON DATABASE authelia TO $POSTGRES_USER;
|
||||
|
||||
-- Log success
|
||||
SELECT 'Compose databases initialized:' AS status;
|
||||
SELECT datname FROM pg_database
|
||||
WHERE datname IN ('directus', 'umami', 'n8n', 'linkwarden', 'joplin', 'mattermost', 'tandoor', 'asciinema', 'gitea', 'coolify')
|
||||
WHERE datname IN ('directus', 'umami', 'n8n', 'linkwarden', 'joplin', 'mattermost', 'tandoor', 'asciinema', 'gitea', 'coolify', 'authelia')
|
||||
ORDER BY datname;
|
||||
EOSQL
|
||||
|
||||
@@ -83,4 +88,5 @@ echo " • tandoor - Recipe manager database"
|
||||
echo " • asciinema - Terminal recording server database"
|
||||
echo " • gitea - Self-hosted Git service database"
|
||||
echo " • coolify - Deployment platform database"
|
||||
echo " • authelia - SSO authentication database"
|
||||
echo ""
|
||||
|
||||
Reference in New Issue
Block a user