Remove Tinyauth SSO provider and migrate to Authelia for authentication. Update LLDAP to use PostgreSQL backend and remove Tinyauth middleware from core services. Changes: - Remove Tinyauth service entirely (compose/core/tinyauth/) - Update LLDAP configuration with PostgreSQL database - Remove Tinyauth middleware from Traefik dashboard - Update LLDAP credentials and timezone to America/Los_Angeles
29 lines
1.1 KiB
Bash
29 lines
1.1 KiB
Bash
# LLDAP Configuration
|
|
# Base DN for the LDAP directory
|
|
LLDAP_LDAP_BASE_DN=dc=fig,dc=systems
|
|
|
|
# Admin user configuration
|
|
LLDAP_LDAP_USER_DN=admin
|
|
LLDAP_LDAP_USER_EMAIL=admin@edfig.dev
|
|
# Use a strong password (at least 16 characters, mix of letters, numbers, symbols)
|
|
# Example format: MyS3cur3P@ssw0rd!2024#HomeL@b
|
|
LLDAP_LDAP_USER_PASS=hMgm2Jv9tJWLipwbJ95WxlYyzqw9upae
|
|
|
|
# JWT secret for session management (64+ character random string)
|
|
# Generate with: openssl rand -hex 32
|
|
# Example format: a1b2c3d4e5f67890abcdef1234567890a1b2c3d4e5f67890abcdef1234567890
|
|
LLDAP_JWT_SECRET=be7004ef47e87702ab836e7bdd6ff93d161a9b03649541ddb269ba732933efd8
|
|
|
|
# Database URL (PostgreSQL)
|
|
LLDAP_DATABASE_URL=postgres://lldap:lldap_db_password_change_me@lldap-db/lldap
|
|
|
|
# Timezone
|
|
TZ=America/Los_Angeles
|
|
|
|
# Optional: SMTP configuration for password reset emails
|
|
# LLDAP_SMTP_OPTIONS__SERVER=smtp.gmail.com
|
|
# LLDAP_SMTP_OPTIONS__PORT=587
|
|
# LLDAP_SMTP_OPTIONS__SMTP_ENCRYPTION=STARTTLS
|
|
# LLDAP_SMTP_OPTIONS__USER=your-email@gmail.com
|
|
# LLDAP_SMTP_OPTIONS__PASSWORD=your-app-password
|
|
# LLDAP_SMTP_OPTIONS__FROM=LLDAP Admin <admin@edfig.dev>
|