feat: add Authelia SSO authentication service

- Add Authelia service to NET stack for centralized SSO
- Create configuration.yml with PostgreSQL storage
- Create users_database.yml for file-based user management
- Add authelia database to PostgreSQL init script
- Configure Traefik ForwardAuth middleware
- Add environment variables to arty.yml
- Supports TOTP and WebAuthn 2FA
- Email notifications via Mailpit SMTP relay
- Protected services: netdata, mailpit, scrapy, restic, traefik, dev, n8n, asciinema, coolify
This commit is contained in:
2025-11-15 19:53:04 +01:00
parent b19afa6a04
commit f9c953ecbc
5 changed files with 181 additions and 1 deletions

View File

@@ -49,6 +49,10 @@ psql -v ON_ERROR_STOP=1 --username "$POSTGRES_USER" --dbname "$POSTGRES_DB" <<-E
SELECT 'CREATE DATABASE coolify'
WHERE NOT EXISTS (SELECT FROM pg_database WHERE datname = 'coolify')\\gexec
-- Authelia SSO authentication database
SELECT 'CREATE DATABASE authelia'
WHERE NOT EXISTS (SELECT FROM pg_database WHERE datname = 'authelia')\\gexec
-- Grant privileges to all databases
GRANT ALL PRIVILEGES ON DATABASE directus TO $POSTGRES_USER;
GRANT ALL PRIVILEGES ON DATABASE umami TO $POSTGRES_USER;
@@ -60,11 +64,12 @@ psql -v ON_ERROR_STOP=1 --username "$POSTGRES_USER" --dbname "$POSTGRES_DB" <<-E
GRANT ALL PRIVILEGES ON DATABASE asciinema TO $POSTGRES_USER;
GRANT ALL PRIVILEGES ON DATABASE gitea TO $POSTGRES_USER;
GRANT ALL PRIVILEGES ON DATABASE coolify TO $POSTGRES_USER;
GRANT ALL PRIVILEGES ON DATABASE authelia TO $POSTGRES_USER;
-- Log success
SELECT 'Compose databases initialized:' AS status;
SELECT datname FROM pg_database
WHERE datname IN ('directus', 'umami', 'n8n', 'linkwarden', 'joplin', 'mattermost', 'tandoor', 'asciinema', 'gitea', 'coolify')
WHERE datname IN ('directus', 'umami', 'n8n', 'linkwarden', 'joplin', 'mattermost', 'tandoor', 'asciinema', 'gitea', 'coolify', 'authelia')
ORDER BY datname;
EOSQL
@@ -83,4 +88,5 @@ echo " • tandoor - Recipe manager database"
echo " • asciinema - Terminal recording server database"
echo " • gitea - Self-hosted Git service database"
echo " • coolify - Deployment platform database"
echo " • authelia - SSO authentication database"
echo ""