4 Commits

Author	SHA1	Message	Date
Sebastian Krüger	9f6a119bf9	fix: update Authelia configuration for v4.38+ compatibility ... - Use modern server.address syntax instead of host/port - Add identity_validation.reset_password.jwt_secret (deprecates jwt_secret) - Update session to use cookies array with secret - Fix session.remember_me_duration to remember_me	2025-11-15 20:03:39 +01:00
Sebastian Krüger	94e6656f31	refactor: make Authelia user management scalable ... - Remove envsubst complexity for password hashes - Keep users_database.yml only on server (not in git) - Add users_database.yml to .gitignore - Update users_database.template.yml with multi-user examples - Configure Authelia to watch users_database.yml for changes - Users can now be added/removed by editing the file on server - Supports unlimited users without code changes	2025-11-15 19:59:17 +01:00
Sebastian Krüger	37f1edbd01	refactor: use .env for Authelia password hash ... - Rename users_database.yml to users_database.template.yml - Use envsubst to substitute AUTHELIA_USER_PASSWORD_HASH from .env - Update configuration.yml to use /config/users_database.yml - Add AUTHELIA_USER_PASSWORD_HASH environment variable to compose - Password hash now stored securely in .env instead of git	2025-11-15 19:56:56 +01:00
Sebastian Krüger	f9c953ecbc	feat: add Authelia SSO authentication service ... - Add Authelia service to NET stack for centralized SSO - Create configuration.yml with PostgreSQL storage - Create users_database.yml for file-based user management - Add authelia database to PostgreSQL init script - Configure Traefik ForwardAuth middleware - Add environment variables to arty.yml - Supports TOTP and WebAuthn 2FA - Email notifications via Mailpit SMTP relay - Protected services: netdata, mailpit, scrapy, restic, traefik, dev, n8n, asciinema, coolify	2025-11-15 19:53:04 +01:00