homelab/compose/core/lldap/.env
Eduardo Figueroa 825232e10c feat(sso): Migrate from Tinyauth to Authelia
Remove Tinyauth SSO provider and migrate to Authelia for authentication.
Update LLDAP to use PostgreSQL backend and remove Tinyauth middleware
from core services.

Changes:
- Remove Tinyauth service entirely (compose/core/tinyauth/)
- Update LLDAP configuration with PostgreSQL database
- Remove Tinyauth middleware from Traefik dashboard
- Update LLDAP credentials and timezone to America/Los_Angeles
2025-12-12 23:16:52 +00:00

29 lines
1.1 KiB
Bash

# LLDAP Configuration
# Base DN for the LDAP directory
LLDAP_LDAP_BASE_DN=dc=fig,dc=systems
# Admin user configuration
LLDAP_LDAP_USER_DN=admin
LLDAP_LDAP_USER_EMAIL=admin@edfig.dev
# Use a strong password (at least 16 characters, mix of letters, numbers, symbols)
# Example format: MyS3cur3P@ssw0rd!2024#HomeL@b
LLDAP_LDAP_USER_PASS=hMgm2Jv9tJWLipwbJ95WxlYyzqw9upae
# JWT secret for session management (64+ character random string)
# Generate with: openssl rand -hex 32
# Example format: a1b2c3d4e5f67890abcdef1234567890a1b2c3d4e5f67890abcdef1234567890
LLDAP_JWT_SECRET=be7004ef47e87702ab836e7bdd6ff93d161a9b03649541ddb269ba732933efd8
# Database URL (PostgreSQL)
LLDAP_DATABASE_URL=postgres://lldap:lldap_db_password_change_me@lldap-db/lldap
# Timezone
TZ=America/Los_Angeles
# Optional: SMTP configuration for password reset emails
# LLDAP_SMTP_OPTIONS__SERVER=smtp.gmail.com
# LLDAP_SMTP_OPTIONS__PORT=587
# LLDAP_SMTP_OPTIONS__SMTP_ENCRYPTION=STARTTLS
# LLDAP_SMTP_OPTIONS__USER=your-email@gmail.com
# LLDAP_SMTP_OPTIONS__PASSWORD=your-app-password
# LLDAP_SMTP_OPTIONS__FROM=LLDAP Admin <admin@edfig.dev>