TrueCharts-Bot
@@ -1,99 +0,0 @@
|
||||
# Changelog
|
||||
|
||||
|
||||
## [authelia-11.0.16](https://github.com/truecharts/apps/compare/authelia-11.0.15...authelia-11.0.16) (2022-07-12)
|
||||
|
||||
### Chore
|
||||
|
||||
- bump to regenerate documentation
|
||||
|
||||
|
||||
|
||||
<a name="authelia-11.0.15"></a>
|
||||
### [authelia-11.0.15](https://github.com/truecharts/apps/compare/authelia-11.0.14...authelia-11.0.15) (2022-07-12)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#3147](https://github.com/truecharts/apps/issues/3147))
|
||||
|
||||
|
||||
|
||||
<a name="authelia-11.0.14"></a>
|
||||
### [authelia-11.0.14](https://github.com/truecharts/apps/compare/authelia-11.0.13...authelia-11.0.14) (2022-07-11)
|
||||
|
||||
#### Chore
|
||||
|
||||
* move icons into the apps folder ([#3139](https://github.com/truecharts/apps/issues/3139))
|
||||
|
||||
|
||||
|
||||
<a name="authelia-11.0.13"></a>
|
||||
### [authelia-11.0.13](https://github.com/truecharts/apps/compare/authelia-11.0.12...authelia-11.0.13) (2022-07-09)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#3113](https://github.com/truecharts/apps/issues/3113))
|
||||
|
||||
|
||||
|
||||
<a name="authelia-11.0.12"></a>
|
||||
### [authelia-11.0.12](https://github.com/truecharts/apps/compare/authelia-11.0.11...authelia-11.0.12) (2022-07-06)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update docker general non-major ([#3078](https://github.com/truecharts/apps/issues/3078))
|
||||
|
||||
|
||||
|
||||
<a name="authelia-11.0.11"></a>
|
||||
### [authelia-11.0.11](https://github.com/truecharts/apps/compare/authelia-11.0.10...authelia-11.0.11) (2022-07-05)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#3075](https://github.com/truecharts/apps/issues/3075))
|
||||
|
||||
|
||||
|
||||
<a name="authelia-11.0.10"></a>
|
||||
### [authelia-11.0.10](https://github.com/truecharts/apps/compare/authelia-11.0.9...authelia-11.0.10) (2022-07-04)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#3066](https://github.com/truecharts/apps/issues/3066))
|
||||
|
||||
|
||||
|
||||
<a name="authelia-11.0.9"></a>
|
||||
### [authelia-11.0.9](https://github.com/truecharts/apps/compare/authelia-11.0.8...authelia-11.0.9) (2022-06-29)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update docker general non-major ([#3002](https://github.com/truecharts/apps/issues/3002))
|
||||
|
||||
|
||||
|
||||
<a name="authelia-11.0.8"></a>
|
||||
### [authelia-11.0.8](https://github.com/truecharts/apps/compare/authelia-11.0.7...authelia-11.0.8) (2022-06-25)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#2977](https://github.com/truecharts/apps/issues/2977))
|
||||
|
||||
|
||||
|
||||
<a name="authelia-11.0.7"></a>
|
||||
### [authelia-11.0.7](https://github.com/truecharts/apps/compare/authelia-11.0.6...authelia-11.0.7) (2022-06-22)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#2948](https://github.com/truecharts/apps/issues/2948))
|
||||
|
||||
|
||||
|
||||
<a name="authelia-11.0.6"></a>
|
||||
### [authelia-11.0.6](https://github.com/truecharts/apps/compare/authelia-11.0.5...authelia-11.0.6) (2022-06-21)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#2943](https://github.com/truecharts/apps/issues/2943))
|
||||
|
||||
@@ -1,12 +0,0 @@
|
||||
dependencies:
|
||||
- name: common
|
||||
repository: https://library-charts.truecharts.org
|
||||
version: 10.4.4
|
||||
- name: postgresql
|
||||
repository: https://charts.truecharts.org/
|
||||
version: 8.0.30
|
||||
- name: redis
|
||||
repository: https://charts.truecharts.org
|
||||
version: 3.0.30
|
||||
digest: sha256:219b167cbd3e6d31f846ea247c9c12c15ece396a62777870f479b331a392bd5d
|
||||
generated: "2022-07-12T20:49:24.648854708Z"
|
||||
@@ -1,46 +0,0 @@
|
||||
apiVersion: v2
|
||||
appVersion: "4.36.2"
|
||||
dependencies:
|
||||
- name: common
|
||||
repository: https://library-charts.truecharts.org
|
||||
version: 10.4.4
|
||||
- condition: postgresql.enabled
|
||||
name: postgresql
|
||||
repository: https://charts.truecharts.org/
|
||||
version: 8.0.30
|
||||
- condition: redis.enabled
|
||||
name: redis
|
||||
repository: https://charts.truecharts.org
|
||||
version: 3.0.30
|
||||
deprecated: false
|
||||
description: Authelia is a Single Sign-On Multi-Factor portal for web apps
|
||||
home: https://github.com/truecharts/apps/tree/master/charts/stable/authelia
|
||||
icon: https://truecharts.org/img/appicons/authelia.png
|
||||
keywords:
|
||||
- authelia
|
||||
- authentication
|
||||
- login
|
||||
- SSO
|
||||
- Authentication
|
||||
- Security
|
||||
- Two-Factor
|
||||
- U2F
|
||||
- YubiKey
|
||||
- Push Notifications
|
||||
- LDAP
|
||||
kubeVersion: '>=1.16.0-0'
|
||||
maintainers:
|
||||
- email: info@truecharts.org
|
||||
name: TrueCharts
|
||||
url: https://truecharts.org
|
||||
name: authelia
|
||||
sources:
|
||||
- https://github.com/authelia/chartrepo
|
||||
- https://github.com/authelia/authelia
|
||||
type: application
|
||||
version: 11.0.16
|
||||
annotations:
|
||||
truecharts.org/catagories: |
|
||||
- security
|
||||
truecharts.org/SCALE-support: "true"
|
||||
truecharts.org/grade: U
|
||||
@@ -1,45 +0,0 @@
|
||||
# authelia
|
||||
|
||||
Authelia is a Single Sign-On Multi-Factor portal for web apps
|
||||
|
||||
TrueCharts are designed to be installed as TrueNAS SCALE app only. We can not guarantee this charts works as a stand-alone helm installation.
|
||||
**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/apps/issues/new/choose)**
|
||||
|
||||
## Source Code
|
||||
|
||||
* <https://github.com/authelia/chartrepo>
|
||||
* <https://github.com/authelia/authelia>
|
||||
|
||||
## Requirements
|
||||
|
||||
Kubernetes: `>=1.16.0-0`
|
||||
|
||||
## Dependencies
|
||||
|
||||
| Repository | Name | Version |
|
||||
|------------|------|---------|
|
||||
| https://charts.truecharts.org/ | postgresql | 8.0.30 |
|
||||
| https://charts.truecharts.org | redis | 3.0.30 |
|
||||
| https://library-charts.truecharts.org | common | 10.4.4 |
|
||||
|
||||
## Installing the Chart
|
||||
|
||||
To install this App on TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/02-Installing-an-App/).
|
||||
|
||||
## Upgrading, Rolling Back and Uninstalling the Chart
|
||||
|
||||
To upgrade, rollback or delete this App from TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/04-Upgrade-rollback-delete-an-App/).
|
||||
|
||||
##### Connecting to other apps
|
||||
If you need to connect this App to other Apps on TrueNAS SCALE, please refer to our [Linking Apps Internally](https://truecharts.org/manual/Quick-Start%20Guides/06-linking-apps/) quick-start guide.
|
||||
|
||||
## Support
|
||||
|
||||
- Please check our [quick-start guides](https://truecharts.org/manual/Quick-Start%20Guides/01-Adding-TrueCharts/) first.
|
||||
- See the [Wiki](https://truecharts.org)
|
||||
- Check our [Discord](https://discord.gg/tVsPTHWTtr)
|
||||
- Open a [issue](https://github.com/truecharts/apps/issues/new/choose)
|
||||
|
||||
---
|
||||
|
||||
All Rights Reserved - The TrueCharts Project
|
||||
@@ -1,3 +0,0 @@
|
||||
Authelia is a Single Sign-On Multi-Factor portal for web apps
|
||||
|
||||
This App is supplied by TrueCharts, for more information please visit https://truecharts.org
|
||||
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
|
Before Width: | Height: | Size: 18 KiB |
@@ -1,623 +0,0 @@
|
||||
image:
|
||||
repository: tccr.io/truecharts/authelia
|
||||
pullPolicy: IfNotPresent
|
||||
tag: v4.36.2@sha256:840f67bae1d2c090922c6a1781da6f6b7ce601e4303a4461bcc43a967dd95c62
|
||||
|
||||
command: ["authelia"]
|
||||
args: ["--config=/configuration.yaml"]
|
||||
|
||||
enableServiceLinks: false
|
||||
|
||||
service:
|
||||
main:
|
||||
ports:
|
||||
main:
|
||||
port: 9091
|
||||
targetPort: 9091
|
||||
|
||||
persistence:
|
||||
config:
|
||||
enabled: true
|
||||
mountPath: "/config"
|
||||
# Enabled postgres
|
||||
postgresql:
|
||||
enabled: true
|
||||
existingSecret: "dbcreds"
|
||||
postgresqlUsername: authelia
|
||||
postgresqlDatabase: authelia
|
||||
|
||||
# Enabled redis
|
||||
# ... for more options see https://github.com/tccr.io/truecharts/charts/tree/master/tccr.io/truecharts/redis
|
||||
redis:
|
||||
enabled: true
|
||||
existingSecret: "rediscreds"
|
||||
|
||||
resources:
|
||||
limits: {}
|
||||
# limits:
|
||||
# cpu: "4.00"
|
||||
# memory: 125Mi
|
||||
requests: {}
|
||||
# requests:
|
||||
# cpu: "0.25"
|
||||
# memory: 50Mi
|
||||
|
||||
envFrom:
|
||||
- configMapRef:
|
||||
name: authelia-paths
|
||||
|
||||
probes:
|
||||
liveness:
|
||||
type: HTTP
|
||||
path: /api/health"
|
||||
|
||||
readiness:
|
||||
type: HTTP
|
||||
path: "/api/health"
|
||||
|
||||
startup:
|
||||
type: HTTP
|
||||
path: "/api/health"
|
||||
|
||||
domain: example.com
|
||||
|
||||
##
|
||||
## Server Configuration
|
||||
##
|
||||
server:
|
||||
##
|
||||
## Port sets the configured port for the daemon, service, and the probes.
|
||||
## Default is 9091 and should not need to be changed.
|
||||
##
|
||||
port: 9091
|
||||
|
||||
## Buffers usually should be configured to be the same value.
|
||||
## Explanation at https://www.authelia.com/docs/configuration/server.html
|
||||
## Read buffer size adjusts the server's max incoming request size in bytes.
|
||||
## Write buffer size does the same for outgoing responses.
|
||||
read_buffer_size: 4096
|
||||
write_buffer_size: 4096
|
||||
## Set the single level path Authelia listens on.
|
||||
## Must be alphanumeric chars and should not contain any slashes.
|
||||
path: ""
|
||||
|
||||
log:
|
||||
## Level of verbosity for logs: info, debug, trace.
|
||||
level: trace
|
||||
|
||||
## Format the logs are written as: json, text.
|
||||
format: text
|
||||
|
||||
## TODO: Statefulness check should check if this is set, and the configMap should enable it.
|
||||
## File path where the logs will be written. If not set logs are written to stdout.
|
||||
# file_path: /config/authelia.log
|
||||
|
||||
## Default redirection URL
|
||||
##
|
||||
## If user tries to authenticate without any referer, Authelia does not know where to redirect the user to at the end
|
||||
## of the authentication process. This parameter allows you to specify the default redirection URL Authelia will use
|
||||
## in such a case.
|
||||
##
|
||||
## Note: this parameter is optional. If not provided, user won't be redirected upon successful authentication.
|
||||
## Default is https://www.<domain> (value at the top of the values.yaml).
|
||||
default_redirection_url: ""
|
||||
# default_redirection_url: https://example.com
|
||||
|
||||
theme: light
|
||||
|
||||
##
|
||||
## TOTP Configuration
|
||||
##
|
||||
## Parameters used for TOTP generation
|
||||
totp:
|
||||
## The issuer name displayed in the Authenticator application of your choice
|
||||
## See: https://github.com/google/google-authenticator/wiki/Key-Uri-Format for more info on issuer names
|
||||
## Defaults to <domain>.
|
||||
issuer: ""
|
||||
## The period in seconds a one-time password is current for. Changing this will require all users to register
|
||||
## their TOTP applications again. Warning: before changing period read the docs link below.
|
||||
period: 30
|
||||
## The skew controls number of one-time passwords either side of the current one that are valid.
|
||||
## Warning: before changing skew read the docs link below.
|
||||
## See: https://www.authelia.com/docs/configuration/one-time-password.html#period-and-skew to read the documentation.
|
||||
skew: 1
|
||||
|
||||
##
|
||||
## Duo Push API Configuration
|
||||
##
|
||||
## Parameters used to contact the Duo API. Those are generated when you protect an application of type
|
||||
## "Partner Auth API" in the management panel.
|
||||
duo_api:
|
||||
enabled: false
|
||||
hostname: api-123456789.example.com
|
||||
integration_key: ABCDEF
|
||||
plain_api_key: ""
|
||||
|
||||
##
|
||||
## Authentication Backend Provider Configuration
|
||||
##
|
||||
## Used for verifying user passwords and retrieve information such as email address and groups users belong to.
|
||||
##
|
||||
## The available providers are: `file`, `ldap`. You must use one and only one of these providers.
|
||||
authentication_backend:
|
||||
## Disable both the HTML element and the API for reset password functionality
|
||||
disable_reset_password: false
|
||||
|
||||
## The amount of time to wait before we refresh data from the authentication backend. Uses duration notation.
|
||||
## To disable this feature set it to 'disable', this will slightly reduce security because for Authelia, users will
|
||||
## always belong to groups they belonged to at the time of login even if they have been removed from them in LDAP.
|
||||
## To force update on every request you can set this to '0' or 'always', this will increase processor demand.
|
||||
## See the below documentation for more information.
|
||||
## Duration Notation docs: https://www.authelia.com/docs/configuration/index.html#duration-notation-format
|
||||
## Refresh Interval docs: https://www.authelia.com/docs/configuration/authentication/ldap.html#refresh-interval
|
||||
refresh_interval: 5m
|
||||
|
||||
## LDAP backend configuration.
|
||||
##
|
||||
## This backend allows Authelia to be scaled to more
|
||||
## than one instance and therefore is recommended for
|
||||
## production.
|
||||
ldap:
|
||||
|
||||
## Enable LDAP Backend.
|
||||
enabled: false
|
||||
|
||||
## The LDAP implementation, this affects elements like the attribute utilised for resetting a password.
|
||||
## Acceptable options are as follows:
|
||||
## - 'activedirectory' - For Microsoft Active Directory.
|
||||
## - 'custom' - For custom specifications of attributes and filters.
|
||||
## This currently defaults to 'custom' to maintain existing behaviour.
|
||||
##
|
||||
## Depending on the option here certain other values in this section have a default value, notably all of the
|
||||
## attribute mappings have a default value that this config overrides, you can read more about these default values
|
||||
## at https://www.authelia.com/docs/configuration/authentication/ldap.html#defaults
|
||||
implementation: activedirectory
|
||||
|
||||
## The url to the ldap server. Format: <scheme>://<address>[:<port>].
|
||||
## Scheme can be ldap or ldaps in the format (port optional).
|
||||
url: ldap://openldap.default.svc.cluster.local
|
||||
|
||||
## Connection Timeout.
|
||||
timeout: 5s
|
||||
|
||||
## Use StartTLS with the LDAP connection.
|
||||
start_tls: false
|
||||
|
||||
tls:
|
||||
## Server Name for certificate validation (in case it's not set correctly in the URL).
|
||||
server_name: ""
|
||||
|
||||
## Skip verifying the server certificate (to allow a self-signed certificate).
|
||||
## In preference to setting this we strongly recommend you add the public portion of the certificate to the
|
||||
## certificates directory which is defined by the `certificates_directory` option at the top of the config.
|
||||
skip_verify: false
|
||||
|
||||
## Minimum TLS version for either Secure LDAP or LDAP StartTLS.
|
||||
minimum_version: TLS1.2
|
||||
|
||||
## The base dn for every LDAP query.
|
||||
base_dn: DC=example,DC=com
|
||||
|
||||
## The attribute holding the username of the user. This attribute is used to populate the username in the session
|
||||
## information. It was introduced due to #561 to handle case insensitive search queries. For you information,
|
||||
## Microsoft Active Directory usually uses 'sAMAccountName' and OpenLDAP usually uses 'uid'. Beware that this
|
||||
## attribute holds the unique identifiers for the users binding the user and the configuration stored in database.
|
||||
## Therefore only single value attributes are allowed and the value must never be changed once attributed to a user
|
||||
## otherwise it would break the configuration for that user. Technically, non-unique attributes like 'mail' can also
|
||||
## be used but we don't recommend using them, we instead advise to use the attributes mentioned above
|
||||
## (sAMAccountName and uid) to follow https://www.ietf.org/rfc/rfc2307.txt.
|
||||
username_attribute: ""
|
||||
|
||||
## An additional dn to define the scope to all users.
|
||||
additional_users_dn: OU=Users
|
||||
|
||||
## The users filter used in search queries to find the user profile based on input filled in login form.
|
||||
## Various placeholders are available in the user filter:
|
||||
## - {input} is a placeholder replaced by what the user inputs in the login form.
|
||||
## - {username_attribute} is a mandatory placeholder replaced by what is configured in `username_attribute`.
|
||||
## - {mail_attribute} is a placeholder replaced by what is configured in `mail_attribute`.
|
||||
## - DON'T USE - {0} is an alias for {input} supported for backward compatibility but it will be deprecated in later
|
||||
## versions, so please don't use it.
|
||||
##
|
||||
## Recommended settings are as follows:
|
||||
## - Microsoft Active Directory: (&({username_attribute}={input})(objectCategory=person)(objectClass=user))
|
||||
## - OpenLDAP:
|
||||
## - (&({username_attribute}={input})(objectClass=person))
|
||||
## - (&({username_attribute}={input})(objectClass=inetOrgPerson))
|
||||
##
|
||||
## To allow sign in both with username and email, one can use a filter like
|
||||
## (&(|({username_attribute}={input})({mail_attribute}={input}))(objectClass=person))
|
||||
users_filter: ""
|
||||
|
||||
## An additional dn to define the scope of groups.
|
||||
additional_groups_dn: OU=Groups
|
||||
|
||||
## The groups filter used in search queries to find the groups of the user.
|
||||
## - {input} is a placeholder replaced by what the user inputs in the login form.
|
||||
## - {username} is a placeholder replace by the username stored in LDAP (based on `username_attribute`).
|
||||
## - {dn} is a matcher replaced by the user distinguished name, aka, user DN.
|
||||
## - {username_attribute} is a placeholder replaced by what is configured in `username_attribute`.
|
||||
## - {mail_attribute} is a placeholder replaced by what is configured in `mail_attribute`.
|
||||
## - DON'T USE - {0} is an alias for {input} supported for backward compatibility but it will be deprecated in later
|
||||
## versions, so please don't use it.
|
||||
## - DON'T USE - {1} is an alias for {username} supported for backward compatibility but it will be deprecated in
|
||||
## later version, so please don't use it.
|
||||
##
|
||||
## If your groups use the `groupOfUniqueNames` structure use this instead:
|
||||
## (&(uniquemember={dn})(objectclass=groupOfUniqueNames))
|
||||
groups_filter: ""
|
||||
|
||||
## The attribute holding the name of the group
|
||||
group_name_attribute: ""
|
||||
|
||||
## The attribute holding the mail address of the user. If multiple email addresses are defined for a user, only the
|
||||
## first one returned by the LDAP server is used.
|
||||
mail_attribute: ""
|
||||
|
||||
## The attribute holding the display name of the user. This will be used to greet an authenticated user.
|
||||
display_name_attribute: ""
|
||||
|
||||
## The username of the admin user.
|
||||
user: CN=Authelia,DC=example,DC=com
|
||||
plain_password: ""
|
||||
|
||||
##
|
||||
## File (Authentication Provider)
|
||||
##
|
||||
## With this backend, the users database is stored in a file which is updated when users reset their passwords.
|
||||
## Therefore, this backend is meant to be used in a dev environment and not in production since it prevents Authelia
|
||||
## to be scaled to more than one instance. The options under 'password' have sane defaults, and as it has security
|
||||
## implications it is highly recommended you leave the default values. Before considering changing these settings
|
||||
## please read the docs page below:
|
||||
## https://www.authelia.com/docs/configuration/authentication/file.html#password-hash-algorithm-tuning
|
||||
##
|
||||
## Important: Kubernetes (or HA) users must read https://www.authelia.com/docs/features/statelessness.html
|
||||
##
|
||||
file:
|
||||
enabled: true
|
||||
path: /config/users_database.yml
|
||||
password:
|
||||
algorithm: argon2id
|
||||
iterations: 1
|
||||
key_length: 32
|
||||
salt_length: 16
|
||||
memory: 1024
|
||||
parallelism: 8
|
||||
|
||||
##
|
||||
## Access Control Configuration
|
||||
##
|
||||
## Access control is a list of rules defining the authorizations applied for one resource to users or group of users.
|
||||
##
|
||||
## If 'access_control' is not defined, ACL rules are disabled and the 'bypass' rule is applied, i.e., access is allowed
|
||||
## to anyone. Otherwise restrictions follow the rules defined.
|
||||
##
|
||||
## Note: One can use the wildcard * to match any subdomain.
|
||||
## It must stand at the beginning of the pattern. (example: *.mydomain.com)
|
||||
##
|
||||
## Note: You must put patterns containing wildcards between simple quotes for the YAML to be syntactically correct.
|
||||
##
|
||||
## Definition: A 'rule' is an object with the following keys: 'domain', 'subject', 'policy' and 'resources'.
|
||||
##
|
||||
## - 'domain' defines which domain or set of domains the rule applies to.
|
||||
##
|
||||
## - 'subject' defines the subject to apply authorizations to. This parameter is optional and matching any user if not
|
||||
## provided. If provided, the parameter represents either a user or a group. It should be of the form
|
||||
## 'user:<username>' or 'group:<groupname>'.
|
||||
##
|
||||
## - 'policy' is the policy to apply to resources. It must be either 'bypass', 'one_factor', 'two_factor' or 'deny'.
|
||||
##
|
||||
## - 'resources' is a list of regular expressions that matches a set of resources to apply the policy to. This parameter
|
||||
## is optional and matches any resource if not provided.
|
||||
##
|
||||
## Note: the order of the rules is important. The first policy matching (domain, resource, subject) applies.
|
||||
access_control:
|
||||
## Default policy can either be 'bypass', 'one_factor', 'two_factor' or 'deny'. It is the policy applied to any
|
||||
## resource if there is no policy to be applied to the user.
|
||||
default_policy: deny
|
||||
|
||||
networks: []
|
||||
# networks:
|
||||
# - name: private
|
||||
# networks:
|
||||
# - 10.0.0.0/8
|
||||
# - 172.16.0.0/12
|
||||
# - 192.168.0.0/16
|
||||
# - name: vpn
|
||||
# networks:
|
||||
# - 10.9.0.0/16
|
||||
|
||||
rules: []
|
||||
# rules:
|
||||
# - domain: public.example.com
|
||||
# policy: bypass
|
||||
# - domain: "*.example.com"
|
||||
# policy: bypass
|
||||
# methods:
|
||||
# - OPTIONS
|
||||
# - domain: secure.example.com
|
||||
# policy: one_factor
|
||||
# networks:
|
||||
# - private
|
||||
# - vpn
|
||||
# - 192.168.1.0/24
|
||||
# - 10.0.0.1
|
||||
# - domain:
|
||||
# - secure.example.com
|
||||
# - private.example.com
|
||||
# policy: two_factor
|
||||
# - domain: singlefactor.example.com
|
||||
# policy: one_factor
|
||||
# - domain: "mx2.mail.example.com"
|
||||
# subject: "group:admins"
|
||||
# policy: deny
|
||||
# - domain: "*.example.com"
|
||||
# subject:
|
||||
# - "group:admins"
|
||||
# - "group:moderators"
|
||||
# policy: two_factor
|
||||
# - domain: dev.example.com
|
||||
# resources:
|
||||
# - "^/groups/dev/.*$"
|
||||
# subject: "group:dev"
|
||||
# policy: two_factor
|
||||
# - domain: dev.example.com
|
||||
# resources:
|
||||
# - "^/users/john/.*$"
|
||||
# subject:
|
||||
# - ["group:dev", "user:john"]
|
||||
# - "group:admins"
|
||||
# policy: two_factor
|
||||
# - domain: "{user}.example.com"
|
||||
# policy: bypass
|
||||
|
||||
##
|
||||
## Session Provider Configuration
|
||||
##
|
||||
## The session cookies identify the user once logged in.
|
||||
## The available providers are: `memory`, `redis`. Memory is the provider unless redis is defined.
|
||||
session:
|
||||
## The name of the session cookie. (default: authelia_session).
|
||||
name: authelia_session
|
||||
|
||||
## Sets the Cookie SameSite value. Possible options are none, lax, or strict.
|
||||
## Please read https://www.authelia.com/docs/configuration/session.html#same_site
|
||||
same_site: lax
|
||||
|
||||
## The time in seconds before the cookie expires and session is reset.
|
||||
expiration: 1h
|
||||
|
||||
## The inactivity time in seconds before the session is reset.
|
||||
inactivity: 5m
|
||||
|
||||
## The remember me duration.
|
||||
## Value is in seconds, or duration notation. Value of 0 disables remember me.
|
||||
## See: https://www.authelia.com/docs/configuration/index.html#duration-notation-format
|
||||
## Longer periods are considered less secure because a stolen cookie will last longer giving attackers more time to
|
||||
## spy or attack. Currently the default is 1M or 1 month.
|
||||
remember_me_duration: 1M
|
||||
|
||||
##
|
||||
## Redis Provider
|
||||
##
|
||||
## Important: Kubernetes (or HA) users must read https://www.authelia.com/docs/features/statelessness.html
|
||||
##
|
||||
## The redis connection details
|
||||
redisProvider:
|
||||
port: 6379
|
||||
|
||||
## Optional username to be used with authentication.
|
||||
# username: authelia
|
||||
username: ""
|
||||
|
||||
## This is the Redis DB Index https://redis.io/commands/select (sometimes referred to as database number, DB, etc).
|
||||
database_index: 0
|
||||
|
||||
## The maximum number of concurrent active connections to Redis.
|
||||
maximum_active_connections: 8
|
||||
|
||||
## The target number of idle connections to have open ready for work. Useful when opening connections is slow.
|
||||
minimum_idle_connections: 0
|
||||
|
||||
## The Redis TLS configuration. If defined will require a TLS connection to the Redis instance(s).
|
||||
tls:
|
||||
enabled: false
|
||||
|
||||
## Server Name for certificate validation (in case you are using the IP or non-FQDN in the host option).
|
||||
server_name: ""
|
||||
|
||||
## Skip verifying the server certificate (to allow a self-signed certificate).
|
||||
## In preference to setting this we strongly recommend you add the public portion of the certificate to the
|
||||
## certificates directory which is defined by the `certificates_directory` option at the top of the config.
|
||||
skip_verify: false
|
||||
|
||||
## Minimum TLS version for the connection.
|
||||
minimum_version: TLS1.2
|
||||
|
||||
## The Redis HA configuration options.
|
||||
## This provides specific options to Redis Sentinel, sentinel_name must be defined (Master Name).
|
||||
high_availability:
|
||||
enabled: false
|
||||
enabledSecret: false
|
||||
## Sentinel Name / Master Name
|
||||
sentinel_name: mysentinel
|
||||
|
||||
## The additional nodes to pre-seed the redis provider with (for sentinel).
|
||||
## If the host in the above section is defined, it will be combined with this list to connect to sentinel.
|
||||
## For high availability to be used you must have either defined; the host above or at least one node below.
|
||||
nodes: []
|
||||
# nodes:
|
||||
# - host: sentinel-0.databases.svc.cluster.local
|
||||
# port: 26379
|
||||
# - host: sentinel-1.databases.svc.cluster.local
|
||||
# port: 26379
|
||||
|
||||
## Choose the host with the lowest latency.
|
||||
route_by_latency: false
|
||||
|
||||
## Choose the host randomly.
|
||||
route_randomly: false
|
||||
|
||||
##
|
||||
## Regulation Configuration
|
||||
##
|
||||
## This mechanism prevents attackers from brute forcing the first factor. It bans the user if too many attempts are done
|
||||
## in a short period of time.
|
||||
regulation:
|
||||
## The number of failed login attempts before user is banned. Set it to 0 to disable regulation.
|
||||
max_retries: 3
|
||||
|
||||
## The time range during which the user can attempt login before being banned. The user is banned if the
|
||||
## authentication failed 'max_retries' times in a 'find_time' seconds window. Find Time accepts duration notation.
|
||||
## See: https://www.authelia.com/docs/configuration/index.html#duration-notation-format
|
||||
find_time: 2m
|
||||
|
||||
## The length of time before a banned user can login again. Ban Time accepts duration notation.
|
||||
## See: https://www.authelia.com/docs/configuration/index.html#duration-notation-format
|
||||
ban_time: 5m
|
||||
|
||||
##
|
||||
## Storage Provider Configuration
|
||||
##
|
||||
## The available providers are: `local`, `mysql`, `postgres`. You must use one and only one of these providers.
|
||||
storage:
|
||||
##
|
||||
## PostgreSQL (Storage Provider)
|
||||
##
|
||||
postgres:
|
||||
port: 5432
|
||||
database: authelia
|
||||
username: authelia
|
||||
sslmode: disable
|
||||
timeout: 5s
|
||||
|
||||
##
|
||||
## Notification Provider
|
||||
##
|
||||
##
|
||||
## Notifications are sent to users when they require a password reset, a u2f registration or a TOTP registration.
|
||||
## The available providers are: filesystem, smtp. You must use one and only one of these providers.
|
||||
notifier:
|
||||
## You can disable the notifier startup check by setting this to true.
|
||||
disable_startup_check: false
|
||||
|
||||
##
|
||||
## File System (Notification Provider)
|
||||
##
|
||||
## Important: Kubernetes (or HA) users must read https://www.authelia.com/docs/features/statelessness.html
|
||||
##
|
||||
filesystem:
|
||||
enabled: true
|
||||
filename: /config/notification.txt
|
||||
|
||||
##
|
||||
## SMTP (Notification Provider)
|
||||
##
|
||||
## Use a SMTP server for sending notifications. Authelia uses the PLAIN or LOGIN methods to authenticate.
|
||||
## [Security] By default Authelia will:
|
||||
## - force all SMTP connections over TLS including unauthenticated connections
|
||||
## - use the disable_require_tls boolean value to disable this requirement
|
||||
## (only works for unauthenticated connections)
|
||||
## - validate the SMTP server x509 certificate during the TLS handshake against the hosts trusted certificates
|
||||
## (configure in tls section)
|
||||
smtp:
|
||||
enabled: false
|
||||
enabledSecret: false
|
||||
host: smtp.mail.svc.cluster.local
|
||||
port: 25
|
||||
timeout: 5s
|
||||
username: test
|
||||
plain_password: test
|
||||
sender: admin@example.com
|
||||
## HELO/EHLO Identifier. Some SMTP Servers may reject the default of localhost.
|
||||
identifier: localhost
|
||||
## Subject configuration of the emails sent.
|
||||
## {title} is replaced by the text from the notifier
|
||||
subject: "[Authelia] {title}"
|
||||
## This address is used during the startup check to verify the email configuration is correct.
|
||||
## It's not important what it is except if your email server only allows local delivery.
|
||||
startup_check_address: test@authelia.com
|
||||
disable_require_tls: false
|
||||
disable_html_emails: false
|
||||
|
||||
tls:
|
||||
## Server Name for certificate validation (in case you are using the IP or non-FQDN in the host option).
|
||||
server_name: ""
|
||||
|
||||
## Skip verifying the server certificate (to allow a self-signed certificate).
|
||||
## In preference to setting this we strongly recommend you add the public portion of the certificate to the
|
||||
## certificates directory which is defined by the `certificates_directory` option at the top of the config.
|
||||
skip_verify: false
|
||||
|
||||
## Minimum TLS version for either StartTLS or SMTPS.
|
||||
minimum_version: TLS1.2
|
||||
|
||||
identity_providers:
|
||||
oidc:
|
||||
## Enables this in the config map. Currently in beta stage.
|
||||
## See https://www.authelia.com/docs/configuration/identity-providers/oidc.html#roadmap
|
||||
enabled: false
|
||||
|
||||
access_token_lifespan: 1h
|
||||
authorize_code_lifespan: 1m
|
||||
id_token_lifespan: 1h
|
||||
refresh_token_lifespan: 90m
|
||||
|
||||
enable_client_debug_messages: false
|
||||
|
||||
## SECURITY NOTICE: It's not recommended changing this option, and highly discouraged to have it below 8 for
|
||||
## security reasons.
|
||||
minimum_parameter_entropy: 8
|
||||
|
||||
clients: []
|
||||
# clients:
|
||||
# -
|
||||
## The ID is the OpenID Connect ClientID which is used to link an application to a configuration.
|
||||
# id: myapp
|
||||
|
||||
## The description to show to users when they end up on the consent screen. Defaults to the ID above.
|
||||
# description: My Application
|
||||
|
||||
## The client secret is a shared secret between Authelia and the consumer of this client.
|
||||
# secret: apple123
|
||||
|
||||
## Sets the client to public. This should typically not be set, please see the documentation for usage.
|
||||
# public: false
|
||||
|
||||
## The policy to require for this client; one_factor or two_factor.
|
||||
# authorization_policy: two_factor
|
||||
|
||||
## Audience this client is allowed to request.
|
||||
# audience: []
|
||||
|
||||
## Scopes this client is allowed to request.
|
||||
# scopes:
|
||||
# - openid
|
||||
# - profile
|
||||
# - email
|
||||
# - groups
|
||||
|
||||
## Redirect URI's specifies a list of valid case-sensitive callbacks for this client.
|
||||
# redirect_uris:
|
||||
# - https://oidc.example.com/oauth2/callback
|
||||
|
||||
## Grant Types configures which grants this client can obtain.
|
||||
## It's not recommended to configure this unless you know what you're doing.
|
||||
# grant_types:
|
||||
# - refresh_token
|
||||
# - authorization_code
|
||||
|
||||
## Response Types configures which responses this client can be sent.
|
||||
## It's not recommended to configure this unless you know what you're doing.
|
||||
# response_types:
|
||||
# - code
|
||||
|
||||
## Response Modes configures which response modes this client supports.
|
||||
## It's not recommended to configure this unless you know what you're doing.
|
||||
# response_modes:
|
||||
# - form_post
|
||||
# - query
|
||||
# - fragment
|
||||
|
||||
## The algorithm used to sign userinfo endpoint responses for this client, either none or RS256.
|
||||
# userinfo_signing_algorithm: none
|
||||
File diff suppressed because it is too large
Load Diff
@@ -1,248 +0,0 @@
|
||||
{{/* Define the configmap */}}
|
||||
{{- define "authelia.configmap" -}}
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
name: authelia-paths
|
||||
data:
|
||||
AUTHELIA_SERVER_DISABLE_HEALTHCHECK: "true"
|
||||
AUTHELIA_JWT_SECRET_FILE: "/secrets/JWT_TOKEN"
|
||||
AUTHELIA_SESSION_SECRET_FILE: "/secrets/SESSION_ENCRYPTION_KEY"
|
||||
AUTHELIA_STORAGE_ENCRYPTION_KEY_FILE: "/secrets/ENCRYPTION_KEY"
|
||||
AUTHELIA_STORAGE_POSTGRES_PASSWORD_FILE: "/secrets/STORAGE_PASSWORD"
|
||||
{{- if .Values.authentication_backend.ldap.enabled }}
|
||||
AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PASSWORD_FILE: "/secrets/LDAP_PASSWORD"
|
||||
{{- end }}
|
||||
{{- if .Values.notifier.smtp.enabled }}
|
||||
AUTHELIA_NOTIFIER_SMTP_PASSWORD_FILE: "/secrets/SMTP_PASSWORD"
|
||||
{{- end }}
|
||||
AUTHELIA_SESSION_REDIS_PASSWORD_FILE: "/secrets/REDIS_PASSWORD"
|
||||
{{- if .Values.redisProvider.high_availability.enabled }}
|
||||
AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_PASSWORD_FILE: "/secrets/REDIS_SENTINEL_PASSWORD"
|
||||
{{- end }}
|
||||
{{- if .Values.duo_api.enabled }}
|
||||
AUTHELIA_DUO_API_SECRET_KEY_FILE: "/secrets/DUO_API_KEY"
|
||||
{{- end }}
|
||||
{{- if .Values.identity_providers.oidc.enabled }}
|
||||
AUTHELIA_IDENTITY_PROVIDERS_OIDC_HMAC_SECRET_FILE: "/secrets/OIDC_HMAC_SECRET"
|
||||
AUTHELIA_IDENTITY_PROVIDERS_OIDC_ISSUER_PRIVATE_KEY_FILE: "/secrets/OIDC_PRIVATE_KEY"
|
||||
{{- end }}
|
||||
|
||||
---
|
||||
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
name: authelia-configfile
|
||||
data:
|
||||
configuration.yaml: |
|
||||
---
|
||||
theme: {{ default "light" .Values.theme }}
|
||||
default_redirection_url: {{ default (printf "https://www.%s" .Values.domain) .Values.default_redirection_url }}
|
||||
server:
|
||||
host: 0.0.0.0
|
||||
port: {{ default 9091 .Values.server.port }}
|
||||
{{- if not (eq "" (default "" .Values.server.path)) }}
|
||||
path: {{ .Values.server.path }}
|
||||
{{- end }}
|
||||
read_buffer_size: {{ default 4096 .Values.server.read_buffer_size }}
|
||||
write_buffer_size: {{ default 4096 .Values.server.write_buffer_size }}
|
||||
enable_pprof: {{ default false .Values.server.enable_pprof }}
|
||||
enable_expvars: {{ default false .Values.server.enable_expvars }}
|
||||
log:
|
||||
level: {{ default "info" .Values.log.level }}
|
||||
format: {{ default "text" .Values.log.format }}
|
||||
{{- if not (eq "" (default "" .Values.log.file_path)) }}
|
||||
file_path: {{ .Values.log.file_path }}
|
||||
keep_stdout: true
|
||||
{{- end }}
|
||||
totp:
|
||||
issuer: {{ default .Values.domain .Values.totp.issuer }}
|
||||
period: {{ default 30 .Values.totp.period }}
|
||||
skew: {{ default 1 .Values.totp.skew }}
|
||||
{{- if .Values.duo_api.enabled }}
|
||||
duo_api:
|
||||
hostname: {{ .Values.duo_api.hostname }}
|
||||
integration_key: {{ .Values.duo_api.integration_key }}
|
||||
{{- end }}
|
||||
{{- with $auth := .Values.authentication_backend }}
|
||||
authentication_backend:
|
||||
disable_reset_password: {{ $auth.disable_reset_password }}
|
||||
{{- if $auth.file.enabled }}
|
||||
file:
|
||||
path: {{ $auth.file.path }}
|
||||
password: {{ toYaml $auth.file.password | nindent 10 }}
|
||||
{{- end }}
|
||||
{{- if $auth.ldap.enabled }}
|
||||
ldap:
|
||||
implementation: {{ default "custom" $auth.ldap.implementation }}
|
||||
url: {{ $auth.ldap.url }}
|
||||
timeout: {{ default "5s" $auth.ldap.timeout }}
|
||||
start_tls: {{ $auth.ldap.start_tls }}
|
||||
tls:
|
||||
{{- if hasKey $auth.ldap.tls "server_name" }}
|
||||
server_name: {{ default $auth.ldap.host $auth.ldap.tls.server_name }}
|
||||
{{- end }}
|
||||
minimum_version: {{ default "TLS1.2" $auth.ldap.tls.minimum_version }}
|
||||
skip_verify: {{ default false $auth.ldap.tls.skip_verify }}
|
||||
{{- if $auth.ldap.base_dn }}
|
||||
base_dn: {{ $auth.ldap.base_dn }}
|
||||
{{- end }}
|
||||
{{- if $auth.ldap.username_attribute }}
|
||||
username_attribute: {{ $auth.ldap.username_attribute }}
|
||||
{{- end }}
|
||||
{{- if $auth.ldap.additional_users_dn }}
|
||||
additional_users_dn: {{ $auth.ldap.additional_users_dn }}
|
||||
{{- end }}
|
||||
{{- if $auth.ldap.users_filter }}
|
||||
users_filter: {{ $auth.ldap.users_filter }}
|
||||
{{- end }}
|
||||
{{- if $auth.ldap.additional_groups_dn }}
|
||||
additional_groups_dn: {{ $auth.ldap.additional_groups_dn }}
|
||||
{{- end }}
|
||||
{{- if $auth.ldap.groups_filter }}
|
||||
groups_filter: {{ $auth.ldap.groups_filter }}
|
||||
{{- end }}
|
||||
{{- if $auth.ldap.group_name_attribute }}
|
||||
group_name_attribute: {{ $auth.ldap.group_name_attribute }}
|
||||
{{- end }}
|
||||
{{- if $auth.ldap.mail_attribute }}
|
||||
mail_attribute: {{ $auth.ldap.mail_attribute }}
|
||||
{{- end }}
|
||||
{{- if $auth.ldap.display_name_attribute }}
|
||||
display_name_attribute: {{ $auth.ldap.display_name_attribute }}
|
||||
{{- end }}
|
||||
user: {{ $auth.ldap.user }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- with $session := .Values.session }}
|
||||
session:
|
||||
name: {{ default "authelia_session" $session.name }}
|
||||
domain: {{ required "A valid .Values.domain entry required!" $.Values.domain }}
|
||||
same_site: {{ default "lax" $session.same_site }}
|
||||
expiration: {{ default "1M" $session.expiration }}
|
||||
inactivity: {{ default "5m" $session.inactivity }}
|
||||
remember_me_duration: {{ default "1M" $session.remember_me_duration }}
|
||||
{{- end }}
|
||||
redis:
|
||||
host: {{ .Values.redis.url.plain }}
|
||||
{{- with $redis := .Values.redisProvider }}
|
||||
port: {{ default 6379 $redis.port }}
|
||||
{{- if not (eq $redis.username "") }}
|
||||
username: {{ $redis.username }}
|
||||
{{- end }}
|
||||
maximum_active_connections: {{ default 8 $redis.maximum_active_connections }}
|
||||
minimum_idle_connections: {{ default 0 $redis.minimum_idle_connections }}
|
||||
{{- if $redis.tls.enabled }}
|
||||
tls:
|
||||
server_name: {{ $redis.tls.server_name }}
|
||||
minimum_version: {{ default "TLS1.2" $redis.tls.minimum_version }}
|
||||
skip_verify: {{ $redis.tls.skip_verify }}
|
||||
{{- end }}
|
||||
{{- if $redis.high_availability.enabled }}
|
||||
high_availability:
|
||||
sentinel_name: {{ $redis.high_availability.sentinel_name }}
|
||||
{{- if $redis.high_availability.nodes }}
|
||||
nodes: {{ toYaml $redis.high_availability.nodes | nindent 10 }}
|
||||
{{- end }}
|
||||
route_by_latency: {{ $redis.high_availability.route_by_latency }}
|
||||
route_randomly: {{ $redis.high_availability.route_randomly }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
regulation: {{ toYaml .Values.regulation | nindent 6 }}
|
||||
storage:
|
||||
postgres:
|
||||
host: {{ printf "%v-%v" .Release.Name "postgresql" }}
|
||||
{{- with $storage := .Values.storage }}
|
||||
port: {{ default 5432 $storage.postgres.port }}
|
||||
database: {{ default "authelia" $storage.postgres.database }}
|
||||
username: {{ default "authelia" $storage.postgres.username }}
|
||||
timeout: {{ default "5s" $storage.postgres.timeout }}
|
||||
sslmode: {{ default "disable" $storage.postgres.sslmode }}
|
||||
{{- end }}
|
||||
{{- with $notifier := .Values.notifier }}
|
||||
notifier:
|
||||
disable_startup_check: {{ $.Values.notifier.disable_startup_check }}
|
||||
{{- if $notifier.filesystem.enabled }}
|
||||
filesystem:
|
||||
filename: {{ $notifier.filesystem.filename }}
|
||||
{{- end }}
|
||||
{{- if $notifier.smtp.enabled }}
|
||||
smtp:
|
||||
host: {{ $notifier.smtp.host }}
|
||||
port: {{ default 25 $notifier.smtp.port }}
|
||||
timeout: {{ default "5s" $notifier.smtp.timeout }}
|
||||
username: {{ $notifier.smtp.username }}
|
||||
sender: {{ $notifier.smtp.sender }}
|
||||
identifier: {{ $notifier.smtp.identifier }}
|
||||
subject: {{ $notifier.smtp.subject | quote }}
|
||||
startup_check_address: {{ $notifier.smtp.startup_check_address }}
|
||||
disable_require_tls: {{ $notifier.smtp.disable_require_tls }}
|
||||
disable_html_emails: {{ $notifier.smtp.disable_html_emails }}
|
||||
tls:
|
||||
server_name: {{ default $notifier.smtp.host $notifier.smtp.tls.server_name }}
|
||||
minimum_version: {{ default "TLS1.2" $notifier.smtp.tls.minimum_version }}
|
||||
skip_verify: {{ default false $notifier.smtp.tls.skip_verify }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- if .Values.identity_providers.oidc.enabled }}
|
||||
identity_providers:
|
||||
oidc:
|
||||
access_token_lifespan: {{ default "1h" .Values.identity_providers.oidc.access_token_lifespan }}
|
||||
authorize_code_lifespan: {{ default "1m" .Values.identity_providers.oidc.authorize_code_lifespan }}
|
||||
id_token_lifespan: {{ default "1h" .Values.identity_providers.oidc.id_token_lifespan }}
|
||||
refresh_token_lifespan: {{ default "90m" .Values.identity_providers.oidc.refresh_token_lifespan }}
|
||||
enable_client_debug_messages: {{ default false .Values.identity_providers.oidc.enable_client_debug_messages }}
|
||||
minimum_parameter_entropy: {{ default 8 .Values.identity_providers.oidc.minimum_parameter_entropy }}
|
||||
{{- if gt (len .Values.identity_providers.oidc.clients) 0 }}
|
||||
clients:
|
||||
{{- range $client := .Values.identity_providers.oidc.clients }}
|
||||
- id: {{ $client.id }}
|
||||
description: {{ default $client.id $client.description }}
|
||||
secret: {{ default (randAlphaNum 128) $client.secret }}
|
||||
{{- if $client.public }}
|
||||
public: {{ $client.public }}
|
||||
{{- end }}
|
||||
authorization_policy: {{ default "two_factor" $client.authorization_policy }}
|
||||
redirect_uris:
|
||||
{{- range $client.redirect_uris }}
|
||||
- {{ . }}
|
||||
{{- end }}
|
||||
{{- if $client.audience }}
|
||||
audience: {{ toYaml $client.audience | nindent 10 }}
|
||||
{{- end }}
|
||||
scopes: {{ toYaml (default (list "openid" "profile" "email" "groups") $client.scopes) | nindent 10 }}
|
||||
grant_types: {{ toYaml (default (list "refresh_token" "authorization_code") $client.grant_types) | nindent 10 }}
|
||||
response_types: {{ toYaml (default (list "code") $client.response_types) | nindent 10 }}
|
||||
{{- if $client.response_modes }}
|
||||
response_modes: {{ toYaml $client.response_modes | nindent 10 }}
|
||||
{{- end }}
|
||||
userinfo_signing_algorithm: {{ default "none" $client.userinfo_signing_algorithm }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
access_control:
|
||||
{{- if (eq (len .Values.access_control.rules) 0) }}
|
||||
{{- if (eq .Values.access_control.default_policy "bypass") }}
|
||||
default_policy: one_factor
|
||||
{{- else if (eq .Values.access_control.default_policy "deny") }}
|
||||
default_policy: two_factor
|
||||
{{- else }}
|
||||
default_policy: {{ .Values.access_control.default_policy }}
|
||||
{{- end }}
|
||||
{{- else }}
|
||||
default_policy: {{ .Values.access_control.default_policy }}
|
||||
{{- end }}
|
||||
{{- if (eq (len .Values.access_control.networks) 0) }}
|
||||
networks: []
|
||||
{{- else }}
|
||||
networks: {{ toYaml .Values.access_control.networks | nindent 6 }}
|
||||
{{- end }}
|
||||
{{- if (eq (len .Values.access_control.rules) 0) }}
|
||||
rules: []
|
||||
{{- else }}
|
||||
rules: {{ toYaml .Values.access_control.rules | nindent 6 }}
|
||||
{{- end }}
|
||||
...
|
||||
{{- end -}}
|
||||
@@ -1,67 +0,0 @@
|
||||
{{/* Define the secrets */}}
|
||||
{{- define "authelia.secrets" -}}
|
||||
---
|
||||
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
type: Opaque
|
||||
metadata:
|
||||
name: authelia-secrets
|
||||
{{- $autheliaprevious := lookup "v1" "Secret" .Release.Namespace "authelia-secrets" }}
|
||||
{{- $oidckey := "" }}
|
||||
{{- $oidcsecret := "" }}
|
||||
{{- $jwtsecret := "" }}
|
||||
{{- $sessionsecret := "" }}
|
||||
{{- $encryptionkey := "" }}
|
||||
data:
|
||||
{{- if $autheliaprevious }}
|
||||
SESSION_ENCRYPTION_KEY: {{ index $autheliaprevious.data "SESSION_ENCRYPTION_KEY" }}
|
||||
JWT_TOKEN: {{ index $autheliaprevious.data "JWT_TOKEN" }}
|
||||
{{- if ( hasKey $autheliaprevious.data "ENCRYPTION_KEY" ) }}
|
||||
ENCRYPTION_KEY: {{ index $autheliaprevious.data "ENCRYPTION_KEY" }}
|
||||
{{- else }}
|
||||
{{- $encryptionkey := randAlphaNum 100 }}
|
||||
ENCRYPTION_KEY: {{ $encryptionkey | b64enc }}
|
||||
{{- end }}
|
||||
{{- else }}
|
||||
{{- $jwtsecret := randAlphaNum 50 }}
|
||||
{{- $sessionsecret := randAlphaNum 50 }}
|
||||
{{- $encryptionkey := randAlphaNum 100 }}
|
||||
SESSION_ENCRYPTION_KEY: {{ $sessionsecret | b64enc }}
|
||||
JWT_TOKEN: {{ $jwtsecret | b64enc}}
|
||||
ENCRYPTION_KEY: {{ $encryptionkey | b64enc }}
|
||||
{{- end }}
|
||||
|
||||
{{- if .Values.authentication_backend.ldap.enabled }}
|
||||
LDAP_PASSWORD: {{ .Values.authentication_backend.ldap.plain_password | b64enc | quote }}
|
||||
{{- end }}
|
||||
|
||||
{{- if .Values.notifier.smtp.enabled }}
|
||||
SMTP_PASSWORD: {{ .Values.notifier.smtp.plain_password | b64enc | quote }}
|
||||
{{- end }}
|
||||
|
||||
{{- if .Values.duo_api.enabled }}
|
||||
DUO_API_KEY: {{ .Values.duo_api.plain_api_key | b64enc }}
|
||||
{{- end }}
|
||||
|
||||
STORAGE_PASSWORD: {{ .Values.postgresql.postgresqlPassword | trimAll "\"" | b64enc }}
|
||||
|
||||
REDIS_PASSWORD: {{ .Values.redis.redisPassword | trimAll "\"" | b64enc }}
|
||||
{{- if .Values.redisProvider.high_availability.enabled}}
|
||||
REDIS_SENTINEL_PASSWORD: {{ .Values.redis.sentinelPassword | trimAll "\"" | b64enc }}
|
||||
{{- end }}
|
||||
|
||||
{{- if $autheliaprevious }}
|
||||
{{- if and ( hasKey $autheliaprevious.data "OIDC_PRIVATE_KEY" ) ( hasKey $autheliaprevious.data "OIDC_HMAC_SECRET" ) }}
|
||||
OIDC_PRIVATE_KEY: {{ index $autheliaprevious.data "OIDC_PRIVATE_KEY" }}
|
||||
OIDC_HMAC_SECRET: {{ index $autheliaprevious.data "OIDC_HMAC_SECRET" }}
|
||||
{{- else }}
|
||||
{{- $oidckey := genPrivateKey "rsa" }}
|
||||
{{- $oidcsecret := randAlphaNum 32 }}
|
||||
OIDC_PRIVATE_KEY: {{ $oidckey | b64enc }}
|
||||
OIDC_HMAC_SECRET: {{ $oidcsecret | b64enc }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
|
||||
|
||||
{{- end -}}
|
||||
@@ -1,74 +0,0 @@
|
||||
{{/* Make sure all variables are set properly */}}
|
||||
{{- include "tc.common.loader.init" . }}
|
||||
|
||||
{{/* Render configmap for authelia */}}
|
||||
{{- include "authelia.configmap" . }}
|
||||
|
||||
{{/* Render secrets for authelia */}}
|
||||
{{- include "authelia.secrets" . }}
|
||||
|
||||
{{/* Append the general configMap volume to the volumes */}}
|
||||
{{- define "authelia.configmapVolume" -}}
|
||||
enabled: "true"
|
||||
mountPath: " /configuration.yaml"
|
||||
readOnly: true
|
||||
subPath: configuration.yaml
|
||||
type: "custom"
|
||||
volumeSpec:
|
||||
configMap:
|
||||
name: authelia-configfile
|
||||
items:
|
||||
- key: configuration.yaml
|
||||
path: configuration.yaml
|
||||
{{- end -}}
|
||||
|
||||
{{/* Append the general secret volumes to the volumes */}}
|
||||
{{- define "authelia.secretVolumes" -}}
|
||||
enabled: "true"
|
||||
mountPath: "/secrets"
|
||||
readOnly: true
|
||||
type: "custom"
|
||||
volumeSpec:
|
||||
secret:
|
||||
secretName: authelia-secrets
|
||||
items:
|
||||
- key: "JWT_TOKEN"
|
||||
path: JWT_TOKEN
|
||||
- key: "SESSION_ENCRYPTION_KEY"
|
||||
path: SESSION_ENCRYPTION_KEY
|
||||
- key: "ENCRYPTION_KEY"
|
||||
path: ENCRYPTION_KEY
|
||||
- key: "STORAGE_PASSWORD"
|
||||
path: STORAGE_PASSWORD
|
||||
{{- if .Values.authentication_backend.ldap.enabled }}
|
||||
- key: "LDAP_PASSWORD"
|
||||
path: LDAP_PASSWORD
|
||||
{{- end }}
|
||||
{{- if .Values.notifier.smtp.enabled }}
|
||||
- key: "SMTP_PASSWORD"
|
||||
path: SMTP_PASSWORD
|
||||
{{- end }}
|
||||
- key: "REDIS_PASSWORD"
|
||||
path: REDIS_PASSWORD
|
||||
{{- if .Values.redisProvider.high_availability.enabled}}
|
||||
- key: "REDIS_SENTINEL_PASSWORD"
|
||||
path: REDIS_SENTINEL_PASSWORD
|
||||
{{- end }}
|
||||
{{- if .Values.duo_api.enabled }}
|
||||
- key: "DUO_API_KEY"
|
||||
path: DUO_API_KEY
|
||||
{{- end }}
|
||||
{{- if .Values.identity_providers.oidc.enabled }}
|
||||
- key: "OIDC_PRIVATE_KEY"
|
||||
path: OIDC_PRIVATE_KEY
|
||||
- key: "OIDC_HMAC_SECRET"
|
||||
path: OIDC_HMAC_SECRET
|
||||
{{- end }}
|
||||
{{- end -}}
|
||||
|
||||
{{- $_ := set .Values.persistence "authelia-configfile" (include "authelia.configmapVolume" . | fromYaml) -}}
|
||||
{{- $_ := set .Values.persistence "authelia-secrets" (include "authelia.secretVolumes" . | fromYaml) -}}
|
||||
|
||||
|
||||
{{/* Render the templates */}}
|
||||
{{ include "tc.common.loader.apply" . }}
|
||||
@@ -1,99 +0,0 @@
|
||||
# Changelog
|
||||
|
||||
|
||||
## [authelia-11.0.18](https://github.com/truecharts/apps/compare/authelia-11.0.16...authelia-11.0.18) (2022-07-12)
|
||||
|
||||
### Chore
|
||||
|
||||
- update icons ([#3156](https://github.com/truecharts/apps/issues/3156))
|
||||
- bump to cleanup old docs and use correct icon urls
|
||||
|
||||
|
||||
|
||||
## [authelia-11.0.16](https://github.com/truecharts/apps/compare/authelia-11.0.15...authelia-11.0.16) (2022-07-12)
|
||||
|
||||
### Chore
|
||||
|
||||
- bump to regenerate documentation
|
||||
|
||||
|
||||
|
||||
<a name="authelia-11.0.15"></a>
|
||||
### [authelia-11.0.15](https://github.com/truecharts/apps/compare/authelia-11.0.14...authelia-11.0.15) (2022-07-12)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#3147](https://github.com/truecharts/apps/issues/3147))
|
||||
|
||||
|
||||
|
||||
<a name="authelia-11.0.14"></a>
|
||||
### [authelia-11.0.14](https://github.com/truecharts/apps/compare/authelia-11.0.13...authelia-11.0.14) (2022-07-11)
|
||||
|
||||
#### Chore
|
||||
|
||||
* move icons into the apps folder ([#3139](https://github.com/truecharts/apps/issues/3139))
|
||||
|
||||
|
||||
|
||||
<a name="authelia-11.0.13"></a>
|
||||
### [authelia-11.0.13](https://github.com/truecharts/apps/compare/authelia-11.0.12...authelia-11.0.13) (2022-07-09)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#3113](https://github.com/truecharts/apps/issues/3113))
|
||||
|
||||
|
||||
|
||||
<a name="authelia-11.0.12"></a>
|
||||
### [authelia-11.0.12](https://github.com/truecharts/apps/compare/authelia-11.0.11...authelia-11.0.12) (2022-07-06)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update docker general non-major ([#3078](https://github.com/truecharts/apps/issues/3078))
|
||||
|
||||
|
||||
|
||||
<a name="authelia-11.0.11"></a>
|
||||
### [authelia-11.0.11](https://github.com/truecharts/apps/compare/authelia-11.0.10...authelia-11.0.11) (2022-07-05)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#3075](https://github.com/truecharts/apps/issues/3075))
|
||||
|
||||
|
||||
|
||||
<a name="authelia-11.0.10"></a>
|
||||
### [authelia-11.0.10](https://github.com/truecharts/apps/compare/authelia-11.0.9...authelia-11.0.10) (2022-07-04)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#3066](https://github.com/truecharts/apps/issues/3066))
|
||||
|
||||
|
||||
|
||||
<a name="authelia-11.0.9"></a>
|
||||
### [authelia-11.0.9](https://github.com/truecharts/apps/compare/authelia-11.0.8...authelia-11.0.9) (2022-06-29)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update docker general non-major ([#3002](https://github.com/truecharts/apps/issues/3002))
|
||||
|
||||
|
||||
|
||||
<a name="authelia-11.0.8"></a>
|
||||
### [authelia-11.0.8](https://github.com/truecharts/apps/compare/authelia-11.0.7...authelia-11.0.8) (2022-06-25)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#2977](https://github.com/truecharts/apps/issues/2977))
|
||||
|
||||
|
||||
|
||||
<a name="authelia-11.0.7"></a>
|
||||
### [authelia-11.0.7](https://github.com/truecharts/apps/compare/authelia-11.0.6...authelia-11.0.7) (2022-06-22)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#2948](https://github.com/truecharts/apps/issues/2948))
|
||||
|
||||
@@ -1,12 +0,0 @@
|
||||
dependencies:
|
||||
- name: common
|
||||
repository: https://library-charts.truecharts.org
|
||||
version: 10.4.4
|
||||
- name: postgresql
|
||||
repository: https://charts.truecharts.org/
|
||||
version: 8.0.30
|
||||
- name: redis
|
||||
repository: https://charts.truecharts.org
|
||||
version: 3.0.30
|
||||
digest: sha256:219b167cbd3e6d31f846ea247c9c12c15ece396a62777870f479b331a392bd5d
|
||||
generated: "2022-07-12T22:56:23.168087739Z"
|
||||
@@ -1,46 +0,0 @@
|
||||
apiVersion: v2
|
||||
appVersion: "4.36.2"
|
||||
dependencies:
|
||||
- name: common
|
||||
repository: https://library-charts.truecharts.org
|
||||
version: 10.4.4
|
||||
- condition: postgresql.enabled
|
||||
name: postgresql
|
||||
repository: https://charts.truecharts.org/
|
||||
version: 8.0.30
|
||||
- condition: redis.enabled
|
||||
name: redis
|
||||
repository: https://charts.truecharts.org
|
||||
version: 3.0.30
|
||||
deprecated: false
|
||||
description: Authelia is a Single Sign-On Multi-Factor portal for web apps
|
||||
home: https://github.com/truecharts/apps/tree/master/charts/stable/authelia
|
||||
icon: https://truecharts.org/img/chart-icons/authelia.png
|
||||
keywords:
|
||||
- authelia
|
||||
- authentication
|
||||
- login
|
||||
- SSO
|
||||
- Authentication
|
||||
- Security
|
||||
- Two-Factor
|
||||
- U2F
|
||||
- YubiKey
|
||||
- Push Notifications
|
||||
- LDAP
|
||||
kubeVersion: '>=1.16.0-0'
|
||||
maintainers:
|
||||
- email: info@truecharts.org
|
||||
name: TrueCharts
|
||||
url: https://truecharts.org
|
||||
name: authelia
|
||||
sources:
|
||||
- https://github.com/authelia/chartrepo
|
||||
- https://github.com/authelia/authelia
|
||||
type: application
|
||||
version: 11.0.18
|
||||
annotations:
|
||||
truecharts.org/catagories: |
|
||||
- security
|
||||
truecharts.org/SCALE-support: "true"
|
||||
truecharts.org/grade: U
|
||||
@@ -1,45 +0,0 @@
|
||||
# authelia
|
||||
|
||||
Authelia is a Single Sign-On Multi-Factor portal for web apps
|
||||
|
||||
TrueCharts are designed to be installed as TrueNAS SCALE app only. We can not guarantee this charts works as a stand-alone helm installation.
|
||||
**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/apps/issues/new/choose)**
|
||||
|
||||
## Source Code
|
||||
|
||||
* <https://github.com/authelia/chartrepo>
|
||||
* <https://github.com/authelia/authelia>
|
||||
|
||||
## Requirements
|
||||
|
||||
Kubernetes: `>=1.16.0-0`
|
||||
|
||||
## Dependencies
|
||||
|
||||
| Repository | Name | Version |
|
||||
|------------|------|---------|
|
||||
| https://charts.truecharts.org/ | postgresql | 8.0.30 |
|
||||
| https://charts.truecharts.org | redis | 3.0.30 |
|
||||
| https://library-charts.truecharts.org | common | 10.4.4 |
|
||||
|
||||
## Installing the Chart
|
||||
|
||||
To install this App on TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/02-Installing-an-App/).
|
||||
|
||||
## Upgrading, Rolling Back and Uninstalling the Chart
|
||||
|
||||
To upgrade, rollback or delete this App from TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/04-Upgrade-rollback-delete-an-App/).
|
||||
|
||||
##### Connecting to other apps
|
||||
If you need to connect this App to other Apps on TrueNAS SCALE, please refer to our [Linking Apps Internally](https://truecharts.org/manual/Quick-Start%20Guides/06-linking-apps/) quick-start guide.
|
||||
|
||||
## Support
|
||||
|
||||
- Please check our [quick-start guides](https://truecharts.org/manual/Quick-Start%20Guides/01-Adding-TrueCharts/) first.
|
||||
- See the [Wiki](https://truecharts.org)
|
||||
- Check our [Discord](https://discord.gg/tVsPTHWTtr)
|
||||
- Open a [issue](https://github.com/truecharts/apps/issues/new/choose)
|
||||
|
||||
---
|
||||
|
||||
All Rights Reserved - The TrueCharts Project
|
||||
@@ -1,3 +0,0 @@
|
||||
Authelia is a Single Sign-On Multi-Factor portal for web apps
|
||||
|
||||
This App is supplied by TrueCharts, for more information please visit https://truecharts.org
|
||||
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
|
Before Width: | Height: | Size: 18 KiB |
@@ -1,623 +0,0 @@
|
||||
image:
|
||||
repository: tccr.io/truecharts/authelia
|
||||
pullPolicy: IfNotPresent
|
||||
tag: v4.36.2@sha256:840f67bae1d2c090922c6a1781da6f6b7ce601e4303a4461bcc43a967dd95c62
|
||||
|
||||
command: ["authelia"]
|
||||
args: ["--config=/configuration.yaml"]
|
||||
|
||||
enableServiceLinks: false
|
||||
|
||||
service:
|
||||
main:
|
||||
ports:
|
||||
main:
|
||||
port: 9091
|
||||
targetPort: 9091
|
||||
|
||||
persistence:
|
||||
config:
|
||||
enabled: true
|
||||
mountPath: "/config"
|
||||
# Enabled postgres
|
||||
postgresql:
|
||||
enabled: true
|
||||
existingSecret: "dbcreds"
|
||||
postgresqlUsername: authelia
|
||||
postgresqlDatabase: authelia
|
||||
|
||||
# Enabled redis
|
||||
# ... for more options see https://github.com/tccr.io/truecharts/charts/tree/master/tccr.io/truecharts/redis
|
||||
redis:
|
||||
enabled: true
|
||||
existingSecret: "rediscreds"
|
||||
|
||||
resources:
|
||||
limits: {}
|
||||
# limits:
|
||||
# cpu: "4.00"
|
||||
# memory: 125Mi
|
||||
requests: {}
|
||||
# requests:
|
||||
# cpu: "0.25"
|
||||
# memory: 50Mi
|
||||
|
||||
envFrom:
|
||||
- configMapRef:
|
||||
name: authelia-paths
|
||||
|
||||
probes:
|
||||
liveness:
|
||||
type: HTTP
|
||||
path: /api/health"
|
||||
|
||||
readiness:
|
||||
type: HTTP
|
||||
path: "/api/health"
|
||||
|
||||
startup:
|
||||
type: HTTP
|
||||
path: "/api/health"
|
||||
|
||||
domain: example.com
|
||||
|
||||
##
|
||||
## Server Configuration
|
||||
##
|
||||
server:
|
||||
##
|
||||
## Port sets the configured port for the daemon, service, and the probes.
|
||||
## Default is 9091 and should not need to be changed.
|
||||
##
|
||||
port: 9091
|
||||
|
||||
## Buffers usually should be configured to be the same value.
|
||||
## Explanation at https://www.authelia.com/docs/configuration/server.html
|
||||
## Read buffer size adjusts the server's max incoming request size in bytes.
|
||||
## Write buffer size does the same for outgoing responses.
|
||||
read_buffer_size: 4096
|
||||
write_buffer_size: 4096
|
||||
## Set the single level path Authelia listens on.
|
||||
## Must be alphanumeric chars and should not contain any slashes.
|
||||
path: ""
|
||||
|
||||
log:
|
||||
## Level of verbosity for logs: info, debug, trace.
|
||||
level: trace
|
||||
|
||||
## Format the logs are written as: json, text.
|
||||
format: text
|
||||
|
||||
## TODO: Statefulness check should check if this is set, and the configMap should enable it.
|
||||
## File path where the logs will be written. If not set logs are written to stdout.
|
||||
# file_path: /config/authelia.log
|
||||
|
||||
## Default redirection URL
|
||||
##
|
||||
## If user tries to authenticate without any referer, Authelia does not know where to redirect the user to at the end
|
||||
## of the authentication process. This parameter allows you to specify the default redirection URL Authelia will use
|
||||
## in such a case.
|
||||
##
|
||||
## Note: this parameter is optional. If not provided, user won't be redirected upon successful authentication.
|
||||
## Default is https://www.<domain> (value at the top of the values.yaml).
|
||||
default_redirection_url: ""
|
||||
# default_redirection_url: https://example.com
|
||||
|
||||
theme: light
|
||||
|
||||
##
|
||||
## TOTP Configuration
|
||||
##
|
||||
## Parameters used for TOTP generation
|
||||
totp:
|
||||
## The issuer name displayed in the Authenticator application of your choice
|
||||
## See: https://github.com/google/google-authenticator/wiki/Key-Uri-Format for more info on issuer names
|
||||
## Defaults to <domain>.
|
||||
issuer: ""
|
||||
## The period in seconds a one-time password is current for. Changing this will require all users to register
|
||||
## their TOTP applications again. Warning: before changing period read the docs link below.
|
||||
period: 30
|
||||
## The skew controls number of one-time passwords either side of the current one that are valid.
|
||||
## Warning: before changing skew read the docs link below.
|
||||
## See: https://www.authelia.com/docs/configuration/one-time-password.html#period-and-skew to read the documentation.
|
||||
skew: 1
|
||||
|
||||
##
|
||||
## Duo Push API Configuration
|
||||
##
|
||||
## Parameters used to contact the Duo API. Those are generated when you protect an application of type
|
||||
## "Partner Auth API" in the management panel.
|
||||
duo_api:
|
||||
enabled: false
|
||||
hostname: api-123456789.example.com
|
||||
integration_key: ABCDEF
|
||||
plain_api_key: ""
|
||||
|
||||
##
|
||||
## Authentication Backend Provider Configuration
|
||||
##
|
||||
## Used for verifying user passwords and retrieve information such as email address and groups users belong to.
|
||||
##
|
||||
## The available providers are: `file`, `ldap`. You must use one and only one of these providers.
|
||||
authentication_backend:
|
||||
## Disable both the HTML element and the API for reset password functionality
|
||||
disable_reset_password: false
|
||||
|
||||
## The amount of time to wait before we refresh data from the authentication backend. Uses duration notation.
|
||||
## To disable this feature set it to 'disable', this will slightly reduce security because for Authelia, users will
|
||||
## always belong to groups they belonged to at the time of login even if they have been removed from them in LDAP.
|
||||
## To force update on every request you can set this to '0' or 'always', this will increase processor demand.
|
||||
## See the below documentation for more information.
|
||||
## Duration Notation docs: https://www.authelia.com/docs/configuration/index.html#duration-notation-format
|
||||
## Refresh Interval docs: https://www.authelia.com/docs/configuration/authentication/ldap.html#refresh-interval
|
||||
refresh_interval: 5m
|
||||
|
||||
## LDAP backend configuration.
|
||||
##
|
||||
## This backend allows Authelia to be scaled to more
|
||||
## than one instance and therefore is recommended for
|
||||
## production.
|
||||
ldap:
|
||||
|
||||
## Enable LDAP Backend.
|
||||
enabled: false
|
||||
|
||||
## The LDAP implementation, this affects elements like the attribute utilised for resetting a password.
|
||||
## Acceptable options are as follows:
|
||||
## - 'activedirectory' - For Microsoft Active Directory.
|
||||
## - 'custom' - For custom specifications of attributes and filters.
|
||||
## This currently defaults to 'custom' to maintain existing behaviour.
|
||||
##
|
||||
## Depending on the option here certain other values in this section have a default value, notably all of the
|
||||
## attribute mappings have a default value that this config overrides, you can read more about these default values
|
||||
## at https://www.authelia.com/docs/configuration/authentication/ldap.html#defaults
|
||||
implementation: activedirectory
|
||||
|
||||
## The url to the ldap server. Format: <scheme>://<address>[:<port>].
|
||||
## Scheme can be ldap or ldaps in the format (port optional).
|
||||
url: ldap://openldap.default.svc.cluster.local
|
||||
|
||||
## Connection Timeout.
|
||||
timeout: 5s
|
||||
|
||||
## Use StartTLS with the LDAP connection.
|
||||
start_tls: false
|
||||
|
||||
tls:
|
||||
## Server Name for certificate validation (in case it's not set correctly in the URL).
|
||||
server_name: ""
|
||||
|
||||
## Skip verifying the server certificate (to allow a self-signed certificate).
|
||||
## In preference to setting this we strongly recommend you add the public portion of the certificate to the
|
||||
## certificates directory which is defined by the `certificates_directory` option at the top of the config.
|
||||
skip_verify: false
|
||||
|
||||
## Minimum TLS version for either Secure LDAP or LDAP StartTLS.
|
||||
minimum_version: TLS1.2
|
||||
|
||||
## The base dn for every LDAP query.
|
||||
base_dn: DC=example,DC=com
|
||||
|
||||
## The attribute holding the username of the user. This attribute is used to populate the username in the session
|
||||
## information. It was introduced due to #561 to handle case insensitive search queries. For you information,
|
||||
## Microsoft Active Directory usually uses 'sAMAccountName' and OpenLDAP usually uses 'uid'. Beware that this
|
||||
## attribute holds the unique identifiers for the users binding the user and the configuration stored in database.
|
||||
## Therefore only single value attributes are allowed and the value must never be changed once attributed to a user
|
||||
## otherwise it would break the configuration for that user. Technically, non-unique attributes like 'mail' can also
|
||||
## be used but we don't recommend using them, we instead advise to use the attributes mentioned above
|
||||
## (sAMAccountName and uid) to follow https://www.ietf.org/rfc/rfc2307.txt.
|
||||
username_attribute: ""
|
||||
|
||||
## An additional dn to define the scope to all users.
|
||||
additional_users_dn: OU=Users
|
||||
|
||||
## The users filter used in search queries to find the user profile based on input filled in login form.
|
||||
## Various placeholders are available in the user filter:
|
||||
## - {input} is a placeholder replaced by what the user inputs in the login form.
|
||||
## - {username_attribute} is a mandatory placeholder replaced by what is configured in `username_attribute`.
|
||||
## - {mail_attribute} is a placeholder replaced by what is configured in `mail_attribute`.
|
||||
## - DON'T USE - {0} is an alias for {input} supported for backward compatibility but it will be deprecated in later
|
||||
## versions, so please don't use it.
|
||||
##
|
||||
## Recommended settings are as follows:
|
||||
## - Microsoft Active Directory: (&({username_attribute}={input})(objectCategory=person)(objectClass=user))
|
||||
## - OpenLDAP:
|
||||
## - (&({username_attribute}={input})(objectClass=person))
|
||||
## - (&({username_attribute}={input})(objectClass=inetOrgPerson))
|
||||
##
|
||||
## To allow sign in both with username and email, one can use a filter like
|
||||
## (&(|({username_attribute}={input})({mail_attribute}={input}))(objectClass=person))
|
||||
users_filter: ""
|
||||
|
||||
## An additional dn to define the scope of groups.
|
||||
additional_groups_dn: OU=Groups
|
||||
|
||||
## The groups filter used in search queries to find the groups of the user.
|
||||
## - {input} is a placeholder replaced by what the user inputs in the login form.
|
||||
## - {username} is a placeholder replace by the username stored in LDAP (based on `username_attribute`).
|
||||
## - {dn} is a matcher replaced by the user distinguished name, aka, user DN.
|
||||
## - {username_attribute} is a placeholder replaced by what is configured in `username_attribute`.
|
||||
## - {mail_attribute} is a placeholder replaced by what is configured in `mail_attribute`.
|
||||
## - DON'T USE - {0} is an alias for {input} supported for backward compatibility but it will be deprecated in later
|
||||
## versions, so please don't use it.
|
||||
## - DON'T USE - {1} is an alias for {username} supported for backward compatibility but it will be deprecated in
|
||||
## later version, so please don't use it.
|
||||
##
|
||||
## If your groups use the `groupOfUniqueNames` structure use this instead:
|
||||
## (&(uniquemember={dn})(objectclass=groupOfUniqueNames))
|
||||
groups_filter: ""
|
||||
|
||||
## The attribute holding the name of the group
|
||||
group_name_attribute: ""
|
||||
|
||||
## The attribute holding the mail address of the user. If multiple email addresses are defined for a user, only the
|
||||
## first one returned by the LDAP server is used.
|
||||
mail_attribute: ""
|
||||
|
||||
## The attribute holding the display name of the user. This will be used to greet an authenticated user.
|
||||
display_name_attribute: ""
|
||||
|
||||
## The username of the admin user.
|
||||
user: CN=Authelia,DC=example,DC=com
|
||||
plain_password: ""
|
||||
|
||||
##
|
||||
## File (Authentication Provider)
|
||||
##
|
||||
## With this backend, the users database is stored in a file which is updated when users reset their passwords.
|
||||
## Therefore, this backend is meant to be used in a dev environment and not in production since it prevents Authelia
|
||||
## to be scaled to more than one instance. The options under 'password' have sane defaults, and as it has security
|
||||
## implications it is highly recommended you leave the default values. Before considering changing these settings
|
||||
## please read the docs page below:
|
||||
## https://www.authelia.com/docs/configuration/authentication/file.html#password-hash-algorithm-tuning
|
||||
##
|
||||
## Important: Kubernetes (or HA) users must read https://www.authelia.com/docs/features/statelessness.html
|
||||
##
|
||||
file:
|
||||
enabled: true
|
||||
path: /config/users_database.yml
|
||||
password:
|
||||
algorithm: argon2id
|
||||
iterations: 1
|
||||
key_length: 32
|
||||
salt_length: 16
|
||||
memory: 1024
|
||||
parallelism: 8
|
||||
|
||||
##
|
||||
## Access Control Configuration
|
||||
##
|
||||
## Access control is a list of rules defining the authorizations applied for one resource to users or group of users.
|
||||
##
|
||||
## If 'access_control' is not defined, ACL rules are disabled and the 'bypass' rule is applied, i.e., access is allowed
|
||||
## to anyone. Otherwise restrictions follow the rules defined.
|
||||
##
|
||||
## Note: One can use the wildcard * to match any subdomain.
|
||||
## It must stand at the beginning of the pattern. (example: *.mydomain.com)
|
||||
##
|
||||
## Note: You must put patterns containing wildcards between simple quotes for the YAML to be syntactically correct.
|
||||
##
|
||||
## Definition: A 'rule' is an object with the following keys: 'domain', 'subject', 'policy' and 'resources'.
|
||||
##
|
||||
## - 'domain' defines which domain or set of domains the rule applies to.
|
||||
##
|
||||
## - 'subject' defines the subject to apply authorizations to. This parameter is optional and matching any user if not
|
||||
## provided. If provided, the parameter represents either a user or a group. It should be of the form
|
||||
## 'user:<username>' or 'group:<groupname>'.
|
||||
##
|
||||
## - 'policy' is the policy to apply to resources. It must be either 'bypass', 'one_factor', 'two_factor' or 'deny'.
|
||||
##
|
||||
## - 'resources' is a list of regular expressions that matches a set of resources to apply the policy to. This parameter
|
||||
## is optional and matches any resource if not provided.
|
||||
##
|
||||
## Note: the order of the rules is important. The first policy matching (domain, resource, subject) applies.
|
||||
access_control:
|
||||
## Default policy can either be 'bypass', 'one_factor', 'two_factor' or 'deny'. It is the policy applied to any
|
||||
## resource if there is no policy to be applied to the user.
|
||||
default_policy: deny
|
||||
|
||||
networks: []
|
||||
# networks:
|
||||
# - name: private
|
||||
# networks:
|
||||
# - 10.0.0.0/8
|
||||
# - 172.16.0.0/12
|
||||
# - 192.168.0.0/16
|
||||
# - name: vpn
|
||||
# networks:
|
||||
# - 10.9.0.0/16
|
||||
|
||||
rules: []
|
||||
# rules:
|
||||
# - domain: public.example.com
|
||||
# policy: bypass
|
||||
# - domain: "*.example.com"
|
||||
# policy: bypass
|
||||
# methods:
|
||||
# - OPTIONS
|
||||
# - domain: secure.example.com
|
||||
# policy: one_factor
|
||||
# networks:
|
||||
# - private
|
||||
# - vpn
|
||||
# - 192.168.1.0/24
|
||||
# - 10.0.0.1
|
||||
# - domain:
|
||||
# - secure.example.com
|
||||
# - private.example.com
|
||||
# policy: two_factor
|
||||
# - domain: singlefactor.example.com
|
||||
# policy: one_factor
|
||||
# - domain: "mx2.mail.example.com"
|
||||
# subject: "group:admins"
|
||||
# policy: deny
|
||||
# - domain: "*.example.com"
|
||||
# subject:
|
||||
# - "group:admins"
|
||||
# - "group:moderators"
|
||||
# policy: two_factor
|
||||
# - domain: dev.example.com
|
||||
# resources:
|
||||
# - "^/groups/dev/.*$"
|
||||
# subject: "group:dev"
|
||||
# policy: two_factor
|
||||
# - domain: dev.example.com
|
||||
# resources:
|
||||
# - "^/users/john/.*$"
|
||||
# subject:
|
||||
# - ["group:dev", "user:john"]
|
||||
# - "group:admins"
|
||||
# policy: two_factor
|
||||
# - domain: "{user}.example.com"
|
||||
# policy: bypass
|
||||
|
||||
##
|
||||
## Session Provider Configuration
|
||||
##
|
||||
## The session cookies identify the user once logged in.
|
||||
## The available providers are: `memory`, `redis`. Memory is the provider unless redis is defined.
|
||||
session:
|
||||
## The name of the session cookie. (default: authelia_session).
|
||||
name: authelia_session
|
||||
|
||||
## Sets the Cookie SameSite value. Possible options are none, lax, or strict.
|
||||
## Please read https://www.authelia.com/docs/configuration/session.html#same_site
|
||||
same_site: lax
|
||||
|
||||
## The time in seconds before the cookie expires and session is reset.
|
||||
expiration: 1h
|
||||
|
||||
## The inactivity time in seconds before the session is reset.
|
||||
inactivity: 5m
|
||||
|
||||
## The remember me duration.
|
||||
## Value is in seconds, or duration notation. Value of 0 disables remember me.
|
||||
## See: https://www.authelia.com/docs/configuration/index.html#duration-notation-format
|
||||
## Longer periods are considered less secure because a stolen cookie will last longer giving attackers more time to
|
||||
## spy or attack. Currently the default is 1M or 1 month.
|
||||
remember_me_duration: 1M
|
||||
|
||||
##
|
||||
## Redis Provider
|
||||
##
|
||||
## Important: Kubernetes (or HA) users must read https://www.authelia.com/docs/features/statelessness.html
|
||||
##
|
||||
## The redis connection details
|
||||
redisProvider:
|
||||
port: 6379
|
||||
|
||||
## Optional username to be used with authentication.
|
||||
# username: authelia
|
||||
username: ""
|
||||
|
||||
## This is the Redis DB Index https://redis.io/commands/select (sometimes referred to as database number, DB, etc).
|
||||
database_index: 0
|
||||
|
||||
## The maximum number of concurrent active connections to Redis.
|
||||
maximum_active_connections: 8
|
||||
|
||||
## The target number of idle connections to have open ready for work. Useful when opening connections is slow.
|
||||
minimum_idle_connections: 0
|
||||
|
||||
## The Redis TLS configuration. If defined will require a TLS connection to the Redis instance(s).
|
||||
tls:
|
||||
enabled: false
|
||||
|
||||
## Server Name for certificate validation (in case you are using the IP or non-FQDN in the host option).
|
||||
server_name: ""
|
||||
|
||||
## Skip verifying the server certificate (to allow a self-signed certificate).
|
||||
## In preference to setting this we strongly recommend you add the public portion of the certificate to the
|
||||
## certificates directory which is defined by the `certificates_directory` option at the top of the config.
|
||||
skip_verify: false
|
||||
|
||||
## Minimum TLS version for the connection.
|
||||
minimum_version: TLS1.2
|
||||
|
||||
## The Redis HA configuration options.
|
||||
## This provides specific options to Redis Sentinel, sentinel_name must be defined (Master Name).
|
||||
high_availability:
|
||||
enabled: false
|
||||
enabledSecret: false
|
||||
## Sentinel Name / Master Name
|
||||
sentinel_name: mysentinel
|
||||
|
||||
## The additional nodes to pre-seed the redis provider with (for sentinel).
|
||||
## If the host in the above section is defined, it will be combined with this list to connect to sentinel.
|
||||
## For high availability to be used you must have either defined; the host above or at least one node below.
|
||||
nodes: []
|
||||
# nodes:
|
||||
# - host: sentinel-0.databases.svc.cluster.local
|
||||
# port: 26379
|
||||
# - host: sentinel-1.databases.svc.cluster.local
|
||||
# port: 26379
|
||||
|
||||
## Choose the host with the lowest latency.
|
||||
route_by_latency: false
|
||||
|
||||
## Choose the host randomly.
|
||||
route_randomly: false
|
||||
|
||||
##
|
||||
## Regulation Configuration
|
||||
##
|
||||
## This mechanism prevents attackers from brute forcing the first factor. It bans the user if too many attempts are done
|
||||
## in a short period of time.
|
||||
regulation:
|
||||
## The number of failed login attempts before user is banned. Set it to 0 to disable regulation.
|
||||
max_retries: 3
|
||||
|
||||
## The time range during which the user can attempt login before being banned. The user is banned if the
|
||||
## authentication failed 'max_retries' times in a 'find_time' seconds window. Find Time accepts duration notation.
|
||||
## See: https://www.authelia.com/docs/configuration/index.html#duration-notation-format
|
||||
find_time: 2m
|
||||
|
||||
## The length of time before a banned user can login again. Ban Time accepts duration notation.
|
||||
## See: https://www.authelia.com/docs/configuration/index.html#duration-notation-format
|
||||
ban_time: 5m
|
||||
|
||||
##
|
||||
## Storage Provider Configuration
|
||||
##
|
||||
## The available providers are: `local`, `mysql`, `postgres`. You must use one and only one of these providers.
|
||||
storage:
|
||||
##
|
||||
## PostgreSQL (Storage Provider)
|
||||
##
|
||||
postgres:
|
||||
port: 5432
|
||||
database: authelia
|
||||
username: authelia
|
||||
sslmode: disable
|
||||
timeout: 5s
|
||||
|
||||
##
|
||||
## Notification Provider
|
||||
##
|
||||
##
|
||||
## Notifications are sent to users when they require a password reset, a u2f registration or a TOTP registration.
|
||||
## The available providers are: filesystem, smtp. You must use one and only one of these providers.
|
||||
notifier:
|
||||
## You can disable the notifier startup check by setting this to true.
|
||||
disable_startup_check: false
|
||||
|
||||
##
|
||||
## File System (Notification Provider)
|
||||
##
|
||||
## Important: Kubernetes (or HA) users must read https://www.authelia.com/docs/features/statelessness.html
|
||||
##
|
||||
filesystem:
|
||||
enabled: true
|
||||
filename: /config/notification.txt
|
||||
|
||||
##
|
||||
## SMTP (Notification Provider)
|
||||
##
|
||||
## Use a SMTP server for sending notifications. Authelia uses the PLAIN or LOGIN methods to authenticate.
|
||||
## [Security] By default Authelia will:
|
||||
## - force all SMTP connections over TLS including unauthenticated connections
|
||||
## - use the disable_require_tls boolean value to disable this requirement
|
||||
## (only works for unauthenticated connections)
|
||||
## - validate the SMTP server x509 certificate during the TLS handshake against the hosts trusted certificates
|
||||
## (configure in tls section)
|
||||
smtp:
|
||||
enabled: false
|
||||
enabledSecret: false
|
||||
host: smtp.mail.svc.cluster.local
|
||||
port: 25
|
||||
timeout: 5s
|
||||
username: test
|
||||
plain_password: test
|
||||
sender: admin@example.com
|
||||
## HELO/EHLO Identifier. Some SMTP Servers may reject the default of localhost.
|
||||
identifier: localhost
|
||||
## Subject configuration of the emails sent.
|
||||
## {title} is replaced by the text from the notifier
|
||||
subject: "[Authelia] {title}"
|
||||
## This address is used during the startup check to verify the email configuration is correct.
|
||||
## It's not important what it is except if your email server only allows local delivery.
|
||||
startup_check_address: test@authelia.com
|
||||
disable_require_tls: false
|
||||
disable_html_emails: false
|
||||
|
||||
tls:
|
||||
## Server Name for certificate validation (in case you are using the IP or non-FQDN in the host option).
|
||||
server_name: ""
|
||||
|
||||
## Skip verifying the server certificate (to allow a self-signed certificate).
|
||||
## In preference to setting this we strongly recommend you add the public portion of the certificate to the
|
||||
## certificates directory which is defined by the `certificates_directory` option at the top of the config.
|
||||
skip_verify: false
|
||||
|
||||
## Minimum TLS version for either StartTLS or SMTPS.
|
||||
minimum_version: TLS1.2
|
||||
|
||||
identity_providers:
|
||||
oidc:
|
||||
## Enables this in the config map. Currently in beta stage.
|
||||
## See https://www.authelia.com/docs/configuration/identity-providers/oidc.html#roadmap
|
||||
enabled: false
|
||||
|
||||
access_token_lifespan: 1h
|
||||
authorize_code_lifespan: 1m
|
||||
id_token_lifespan: 1h
|
||||
refresh_token_lifespan: 90m
|
||||
|
||||
enable_client_debug_messages: false
|
||||
|
||||
## SECURITY NOTICE: It's not recommended changing this option, and highly discouraged to have it below 8 for
|
||||
## security reasons.
|
||||
minimum_parameter_entropy: 8
|
||||
|
||||
clients: []
|
||||
# clients:
|
||||
# -
|
||||
## The ID is the OpenID Connect ClientID which is used to link an application to a configuration.
|
||||
# id: myapp
|
||||
|
||||
## The description to show to users when they end up on the consent screen. Defaults to the ID above.
|
||||
# description: My Application
|
||||
|
||||
## The client secret is a shared secret between Authelia and the consumer of this client.
|
||||
# secret: apple123
|
||||
|
||||
## Sets the client to public. This should typically not be set, please see the documentation for usage.
|
||||
# public: false
|
||||
|
||||
## The policy to require for this client; one_factor or two_factor.
|
||||
# authorization_policy: two_factor
|
||||
|
||||
## Audience this client is allowed to request.
|
||||
# audience: []
|
||||
|
||||
## Scopes this client is allowed to request.
|
||||
# scopes:
|
||||
# - openid
|
||||
# - profile
|
||||
# - email
|
||||
# - groups
|
||||
|
||||
## Redirect URI's specifies a list of valid case-sensitive callbacks for this client.
|
||||
# redirect_uris:
|
||||
# - https://oidc.example.com/oauth2/callback
|
||||
|
||||
## Grant Types configures which grants this client can obtain.
|
||||
## It's not recommended to configure this unless you know what you're doing.
|
||||
# grant_types:
|
||||
# - refresh_token
|
||||
# - authorization_code
|
||||
|
||||
## Response Types configures which responses this client can be sent.
|
||||
## It's not recommended to configure this unless you know what you're doing.
|
||||
# response_types:
|
||||
# - code
|
||||
|
||||
## Response Modes configures which response modes this client supports.
|
||||
## It's not recommended to configure this unless you know what you're doing.
|
||||
# response_modes:
|
||||
# - form_post
|
||||
# - query
|
||||
# - fragment
|
||||
|
||||
## The algorithm used to sign userinfo endpoint responses for this client, either none or RS256.
|
||||
# userinfo_signing_algorithm: none
|
||||
File diff suppressed because it is too large
Load Diff
@@ -1,248 +0,0 @@
|
||||
{{/* Define the configmap */}}
|
||||
{{- define "authelia.configmap" -}}
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
name: authelia-paths
|
||||
data:
|
||||
AUTHELIA_SERVER_DISABLE_HEALTHCHECK: "true"
|
||||
AUTHELIA_JWT_SECRET_FILE: "/secrets/JWT_TOKEN"
|
||||
AUTHELIA_SESSION_SECRET_FILE: "/secrets/SESSION_ENCRYPTION_KEY"
|
||||
AUTHELIA_STORAGE_ENCRYPTION_KEY_FILE: "/secrets/ENCRYPTION_KEY"
|
||||
AUTHELIA_STORAGE_POSTGRES_PASSWORD_FILE: "/secrets/STORAGE_PASSWORD"
|
||||
{{- if .Values.authentication_backend.ldap.enabled }}
|
||||
AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PASSWORD_FILE: "/secrets/LDAP_PASSWORD"
|
||||
{{- end }}
|
||||
{{- if .Values.notifier.smtp.enabled }}
|
||||
AUTHELIA_NOTIFIER_SMTP_PASSWORD_FILE: "/secrets/SMTP_PASSWORD"
|
||||
{{- end }}
|
||||
AUTHELIA_SESSION_REDIS_PASSWORD_FILE: "/secrets/REDIS_PASSWORD"
|
||||
{{- if .Values.redisProvider.high_availability.enabled }}
|
||||
AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_PASSWORD_FILE: "/secrets/REDIS_SENTINEL_PASSWORD"
|
||||
{{- end }}
|
||||
{{- if .Values.duo_api.enabled }}
|
||||
AUTHELIA_DUO_API_SECRET_KEY_FILE: "/secrets/DUO_API_KEY"
|
||||
{{- end }}
|
||||
{{- if .Values.identity_providers.oidc.enabled }}
|
||||
AUTHELIA_IDENTITY_PROVIDERS_OIDC_HMAC_SECRET_FILE: "/secrets/OIDC_HMAC_SECRET"
|
||||
AUTHELIA_IDENTITY_PROVIDERS_OIDC_ISSUER_PRIVATE_KEY_FILE: "/secrets/OIDC_PRIVATE_KEY"
|
||||
{{- end }}
|
||||
|
||||
---
|
||||
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
name: authelia-configfile
|
||||
data:
|
||||
configuration.yaml: |
|
||||
---
|
||||
theme: {{ default "light" .Values.theme }}
|
||||
default_redirection_url: {{ default (printf "https://www.%s" .Values.domain) .Values.default_redirection_url }}
|
||||
server:
|
||||
host: 0.0.0.0
|
||||
port: {{ default 9091 .Values.server.port }}
|
||||
{{- if not (eq "" (default "" .Values.server.path)) }}
|
||||
path: {{ .Values.server.path }}
|
||||
{{- end }}
|
||||
read_buffer_size: {{ default 4096 .Values.server.read_buffer_size }}
|
||||
write_buffer_size: {{ default 4096 .Values.server.write_buffer_size }}
|
||||
enable_pprof: {{ default false .Values.server.enable_pprof }}
|
||||
enable_expvars: {{ default false .Values.server.enable_expvars }}
|
||||
log:
|
||||
level: {{ default "info" .Values.log.level }}
|
||||
format: {{ default "text" .Values.log.format }}
|
||||
{{- if not (eq "" (default "" .Values.log.file_path)) }}
|
||||
file_path: {{ .Values.log.file_path }}
|
||||
keep_stdout: true
|
||||
{{- end }}
|
||||
totp:
|
||||
issuer: {{ default .Values.domain .Values.totp.issuer }}
|
||||
period: {{ default 30 .Values.totp.period }}
|
||||
skew: {{ default 1 .Values.totp.skew }}
|
||||
{{- if .Values.duo_api.enabled }}
|
||||
duo_api:
|
||||
hostname: {{ .Values.duo_api.hostname }}
|
||||
integration_key: {{ .Values.duo_api.integration_key }}
|
||||
{{- end }}
|
||||
{{- with $auth := .Values.authentication_backend }}
|
||||
authentication_backend:
|
||||
disable_reset_password: {{ $auth.disable_reset_password }}
|
||||
{{- if $auth.file.enabled }}
|
||||
file:
|
||||
path: {{ $auth.file.path }}
|
||||
password: {{ toYaml $auth.file.password | nindent 10 }}
|
||||
{{- end }}
|
||||
{{- if $auth.ldap.enabled }}
|
||||
ldap:
|
||||
implementation: {{ default "custom" $auth.ldap.implementation }}
|
||||
url: {{ $auth.ldap.url }}
|
||||
timeout: {{ default "5s" $auth.ldap.timeout }}
|
||||
start_tls: {{ $auth.ldap.start_tls }}
|
||||
tls:
|
||||
{{- if hasKey $auth.ldap.tls "server_name" }}
|
||||
server_name: {{ default $auth.ldap.host $auth.ldap.tls.server_name }}
|
||||
{{- end }}
|
||||
minimum_version: {{ default "TLS1.2" $auth.ldap.tls.minimum_version }}
|
||||
skip_verify: {{ default false $auth.ldap.tls.skip_verify }}
|
||||
{{- if $auth.ldap.base_dn }}
|
||||
base_dn: {{ $auth.ldap.base_dn }}
|
||||
{{- end }}
|
||||
{{- if $auth.ldap.username_attribute }}
|
||||
username_attribute: {{ $auth.ldap.username_attribute }}
|
||||
{{- end }}
|
||||
{{- if $auth.ldap.additional_users_dn }}
|
||||
additional_users_dn: {{ $auth.ldap.additional_users_dn }}
|
||||
{{- end }}
|
||||
{{- if $auth.ldap.users_filter }}
|
||||
users_filter: {{ $auth.ldap.users_filter }}
|
||||
{{- end }}
|
||||
{{- if $auth.ldap.additional_groups_dn }}
|
||||
additional_groups_dn: {{ $auth.ldap.additional_groups_dn }}
|
||||
{{- end }}
|
||||
{{- if $auth.ldap.groups_filter }}
|
||||
groups_filter: {{ $auth.ldap.groups_filter }}
|
||||
{{- end }}
|
||||
{{- if $auth.ldap.group_name_attribute }}
|
||||
group_name_attribute: {{ $auth.ldap.group_name_attribute }}
|
||||
{{- end }}
|
||||
{{- if $auth.ldap.mail_attribute }}
|
||||
mail_attribute: {{ $auth.ldap.mail_attribute }}
|
||||
{{- end }}
|
||||
{{- if $auth.ldap.display_name_attribute }}
|
||||
display_name_attribute: {{ $auth.ldap.display_name_attribute }}
|
||||
{{- end }}
|
||||
user: {{ $auth.ldap.user }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- with $session := .Values.session }}
|
||||
session:
|
||||
name: {{ default "authelia_session" $session.name }}
|
||||
domain: {{ required "A valid .Values.domain entry required!" $.Values.domain }}
|
||||
same_site: {{ default "lax" $session.same_site }}
|
||||
expiration: {{ default "1M" $session.expiration }}
|
||||
inactivity: {{ default "5m" $session.inactivity }}
|
||||
remember_me_duration: {{ default "1M" $session.remember_me_duration }}
|
||||
{{- end }}
|
||||
redis:
|
||||
host: {{ .Values.redis.url.plain }}
|
||||
{{- with $redis := .Values.redisProvider }}
|
||||
port: {{ default 6379 $redis.port }}
|
||||
{{- if not (eq $redis.username "") }}
|
||||
username: {{ $redis.username }}
|
||||
{{- end }}
|
||||
maximum_active_connections: {{ default 8 $redis.maximum_active_connections }}
|
||||
minimum_idle_connections: {{ default 0 $redis.minimum_idle_connections }}
|
||||
{{- if $redis.tls.enabled }}
|
||||
tls:
|
||||
server_name: {{ $redis.tls.server_name }}
|
||||
minimum_version: {{ default "TLS1.2" $redis.tls.minimum_version }}
|
||||
skip_verify: {{ $redis.tls.skip_verify }}
|
||||
{{- end }}
|
||||
{{- if $redis.high_availability.enabled }}
|
||||
high_availability:
|
||||
sentinel_name: {{ $redis.high_availability.sentinel_name }}
|
||||
{{- if $redis.high_availability.nodes }}
|
||||
nodes: {{ toYaml $redis.high_availability.nodes | nindent 10 }}
|
||||
{{- end }}
|
||||
route_by_latency: {{ $redis.high_availability.route_by_latency }}
|
||||
route_randomly: {{ $redis.high_availability.route_randomly }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
regulation: {{ toYaml .Values.regulation | nindent 6 }}
|
||||
storage:
|
||||
postgres:
|
||||
host: {{ printf "%v-%v" .Release.Name "postgresql" }}
|
||||
{{- with $storage := .Values.storage }}
|
||||
port: {{ default 5432 $storage.postgres.port }}
|
||||
database: {{ default "authelia" $storage.postgres.database }}
|
||||
username: {{ default "authelia" $storage.postgres.username }}
|
||||
timeout: {{ default "5s" $storage.postgres.timeout }}
|
||||
sslmode: {{ default "disable" $storage.postgres.sslmode }}
|
||||
{{- end }}
|
||||
{{- with $notifier := .Values.notifier }}
|
||||
notifier:
|
||||
disable_startup_check: {{ $.Values.notifier.disable_startup_check }}
|
||||
{{- if $notifier.filesystem.enabled }}
|
||||
filesystem:
|
||||
filename: {{ $notifier.filesystem.filename }}
|
||||
{{- end }}
|
||||
{{- if $notifier.smtp.enabled }}
|
||||
smtp:
|
||||
host: {{ $notifier.smtp.host }}
|
||||
port: {{ default 25 $notifier.smtp.port }}
|
||||
timeout: {{ default "5s" $notifier.smtp.timeout }}
|
||||
username: {{ $notifier.smtp.username }}
|
||||
sender: {{ $notifier.smtp.sender }}
|
||||
identifier: {{ $notifier.smtp.identifier }}
|
||||
subject: {{ $notifier.smtp.subject | quote }}
|
||||
startup_check_address: {{ $notifier.smtp.startup_check_address }}
|
||||
disable_require_tls: {{ $notifier.smtp.disable_require_tls }}
|
||||
disable_html_emails: {{ $notifier.smtp.disable_html_emails }}
|
||||
tls:
|
||||
server_name: {{ default $notifier.smtp.host $notifier.smtp.tls.server_name }}
|
||||
minimum_version: {{ default "TLS1.2" $notifier.smtp.tls.minimum_version }}
|
||||
skip_verify: {{ default false $notifier.smtp.tls.skip_verify }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- if .Values.identity_providers.oidc.enabled }}
|
||||
identity_providers:
|
||||
oidc:
|
||||
access_token_lifespan: {{ default "1h" .Values.identity_providers.oidc.access_token_lifespan }}
|
||||
authorize_code_lifespan: {{ default "1m" .Values.identity_providers.oidc.authorize_code_lifespan }}
|
||||
id_token_lifespan: {{ default "1h" .Values.identity_providers.oidc.id_token_lifespan }}
|
||||
refresh_token_lifespan: {{ default "90m" .Values.identity_providers.oidc.refresh_token_lifespan }}
|
||||
enable_client_debug_messages: {{ default false .Values.identity_providers.oidc.enable_client_debug_messages }}
|
||||
minimum_parameter_entropy: {{ default 8 .Values.identity_providers.oidc.minimum_parameter_entropy }}
|
||||
{{- if gt (len .Values.identity_providers.oidc.clients) 0 }}
|
||||
clients:
|
||||
{{- range $client := .Values.identity_providers.oidc.clients }}
|
||||
- id: {{ $client.id }}
|
||||
description: {{ default $client.id $client.description }}
|
||||
secret: {{ default (randAlphaNum 128) $client.secret }}
|
||||
{{- if $client.public }}
|
||||
public: {{ $client.public }}
|
||||
{{- end }}
|
||||
authorization_policy: {{ default "two_factor" $client.authorization_policy }}
|
||||
redirect_uris:
|
||||
{{- range $client.redirect_uris }}
|
||||
- {{ . }}
|
||||
{{- end }}
|
||||
{{- if $client.audience }}
|
||||
audience: {{ toYaml $client.audience | nindent 10 }}
|
||||
{{- end }}
|
||||
scopes: {{ toYaml (default (list "openid" "profile" "email" "groups") $client.scopes) | nindent 10 }}
|
||||
grant_types: {{ toYaml (default (list "refresh_token" "authorization_code") $client.grant_types) | nindent 10 }}
|
||||
response_types: {{ toYaml (default (list "code") $client.response_types) | nindent 10 }}
|
||||
{{- if $client.response_modes }}
|
||||
response_modes: {{ toYaml $client.response_modes | nindent 10 }}
|
||||
{{- end }}
|
||||
userinfo_signing_algorithm: {{ default "none" $client.userinfo_signing_algorithm }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
access_control:
|
||||
{{- if (eq (len .Values.access_control.rules) 0) }}
|
||||
{{- if (eq .Values.access_control.default_policy "bypass") }}
|
||||
default_policy: one_factor
|
||||
{{- else if (eq .Values.access_control.default_policy "deny") }}
|
||||
default_policy: two_factor
|
||||
{{- else }}
|
||||
default_policy: {{ .Values.access_control.default_policy }}
|
||||
{{- end }}
|
||||
{{- else }}
|
||||
default_policy: {{ .Values.access_control.default_policy }}
|
||||
{{- end }}
|
||||
{{- if (eq (len .Values.access_control.networks) 0) }}
|
||||
networks: []
|
||||
{{- else }}
|
||||
networks: {{ toYaml .Values.access_control.networks | nindent 6 }}
|
||||
{{- end }}
|
||||
{{- if (eq (len .Values.access_control.rules) 0) }}
|
||||
rules: []
|
||||
{{- else }}
|
||||
rules: {{ toYaml .Values.access_control.rules | nindent 6 }}
|
||||
{{- end }}
|
||||
...
|
||||
{{- end -}}
|
||||
@@ -1,67 +0,0 @@
|
||||
{{/* Define the secrets */}}
|
||||
{{- define "authelia.secrets" -}}
|
||||
---
|
||||
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
type: Opaque
|
||||
metadata:
|
||||
name: authelia-secrets
|
||||
{{- $autheliaprevious := lookup "v1" "Secret" .Release.Namespace "authelia-secrets" }}
|
||||
{{- $oidckey := "" }}
|
||||
{{- $oidcsecret := "" }}
|
||||
{{- $jwtsecret := "" }}
|
||||
{{- $sessionsecret := "" }}
|
||||
{{- $encryptionkey := "" }}
|
||||
data:
|
||||
{{- if $autheliaprevious }}
|
||||
SESSION_ENCRYPTION_KEY: {{ index $autheliaprevious.data "SESSION_ENCRYPTION_KEY" }}
|
||||
JWT_TOKEN: {{ index $autheliaprevious.data "JWT_TOKEN" }}
|
||||
{{- if ( hasKey $autheliaprevious.data "ENCRYPTION_KEY" ) }}
|
||||
ENCRYPTION_KEY: {{ index $autheliaprevious.data "ENCRYPTION_KEY" }}
|
||||
{{- else }}
|
||||
{{- $encryptionkey := randAlphaNum 100 }}
|
||||
ENCRYPTION_KEY: {{ $encryptionkey | b64enc }}
|
||||
{{- end }}
|
||||
{{- else }}
|
||||
{{- $jwtsecret := randAlphaNum 50 }}
|
||||
{{- $sessionsecret := randAlphaNum 50 }}
|
||||
{{- $encryptionkey := randAlphaNum 100 }}
|
||||
SESSION_ENCRYPTION_KEY: {{ $sessionsecret | b64enc }}
|
||||
JWT_TOKEN: {{ $jwtsecret | b64enc}}
|
||||
ENCRYPTION_KEY: {{ $encryptionkey | b64enc }}
|
||||
{{- end }}
|
||||
|
||||
{{- if .Values.authentication_backend.ldap.enabled }}
|
||||
LDAP_PASSWORD: {{ .Values.authentication_backend.ldap.plain_password | b64enc | quote }}
|
||||
{{- end }}
|
||||
|
||||
{{- if .Values.notifier.smtp.enabled }}
|
||||
SMTP_PASSWORD: {{ .Values.notifier.smtp.plain_password | b64enc | quote }}
|
||||
{{- end }}
|
||||
|
||||
{{- if .Values.duo_api.enabled }}
|
||||
DUO_API_KEY: {{ .Values.duo_api.plain_api_key | b64enc }}
|
||||
{{- end }}
|
||||
|
||||
STORAGE_PASSWORD: {{ .Values.postgresql.postgresqlPassword | trimAll "\"" | b64enc }}
|
||||
|
||||
REDIS_PASSWORD: {{ .Values.redis.redisPassword | trimAll "\"" | b64enc }}
|
||||
{{- if .Values.redisProvider.high_availability.enabled}}
|
||||
REDIS_SENTINEL_PASSWORD: {{ .Values.redis.sentinelPassword | trimAll "\"" | b64enc }}
|
||||
{{- end }}
|
||||
|
||||
{{- if $autheliaprevious }}
|
||||
{{- if and ( hasKey $autheliaprevious.data "OIDC_PRIVATE_KEY" ) ( hasKey $autheliaprevious.data "OIDC_HMAC_SECRET" ) }}
|
||||
OIDC_PRIVATE_KEY: {{ index $autheliaprevious.data "OIDC_PRIVATE_KEY" }}
|
||||
OIDC_HMAC_SECRET: {{ index $autheliaprevious.data "OIDC_HMAC_SECRET" }}
|
||||
{{- else }}
|
||||
{{- $oidckey := genPrivateKey "rsa" }}
|
||||
{{- $oidcsecret := randAlphaNum 32 }}
|
||||
OIDC_PRIVATE_KEY: {{ $oidckey | b64enc }}
|
||||
OIDC_HMAC_SECRET: {{ $oidcsecret | b64enc }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
|
||||
|
||||
{{- end -}}
|
||||
@@ -1,74 +0,0 @@
|
||||
{{/* Make sure all variables are set properly */}}
|
||||
{{- include "tc.common.loader.init" . }}
|
||||
|
||||
{{/* Render configmap for authelia */}}
|
||||
{{- include "authelia.configmap" . }}
|
||||
|
||||
{{/* Render secrets for authelia */}}
|
||||
{{- include "authelia.secrets" . }}
|
||||
|
||||
{{/* Append the general configMap volume to the volumes */}}
|
||||
{{- define "authelia.configmapVolume" -}}
|
||||
enabled: "true"
|
||||
mountPath: " /configuration.yaml"
|
||||
readOnly: true
|
||||
subPath: configuration.yaml
|
||||
type: "custom"
|
||||
volumeSpec:
|
||||
configMap:
|
||||
name: authelia-configfile
|
||||
items:
|
||||
- key: configuration.yaml
|
||||
path: configuration.yaml
|
||||
{{- end -}}
|
||||
|
||||
{{/* Append the general secret volumes to the volumes */}}
|
||||
{{- define "authelia.secretVolumes" -}}
|
||||
enabled: "true"
|
||||
mountPath: "/secrets"
|
||||
readOnly: true
|
||||
type: "custom"
|
||||
volumeSpec:
|
||||
secret:
|
||||
secretName: authelia-secrets
|
||||
items:
|
||||
- key: "JWT_TOKEN"
|
||||
path: JWT_TOKEN
|
||||
- key: "SESSION_ENCRYPTION_KEY"
|
||||
path: SESSION_ENCRYPTION_KEY
|
||||
- key: "ENCRYPTION_KEY"
|
||||
path: ENCRYPTION_KEY
|
||||
- key: "STORAGE_PASSWORD"
|
||||
path: STORAGE_PASSWORD
|
||||
{{- if .Values.authentication_backend.ldap.enabled }}
|
||||
- key: "LDAP_PASSWORD"
|
||||
path: LDAP_PASSWORD
|
||||
{{- end }}
|
||||
{{- if .Values.notifier.smtp.enabled }}
|
||||
- key: "SMTP_PASSWORD"
|
||||
path: SMTP_PASSWORD
|
||||
{{- end }}
|
||||
- key: "REDIS_PASSWORD"
|
||||
path: REDIS_PASSWORD
|
||||
{{- if .Values.redisProvider.high_availability.enabled}}
|
||||
- key: "REDIS_SENTINEL_PASSWORD"
|
||||
path: REDIS_SENTINEL_PASSWORD
|
||||
{{- end }}
|
||||
{{- if .Values.duo_api.enabled }}
|
||||
- key: "DUO_API_KEY"
|
||||
path: DUO_API_KEY
|
||||
{{- end }}
|
||||
{{- if .Values.identity_providers.oidc.enabled }}
|
||||
- key: "OIDC_PRIVATE_KEY"
|
||||
path: OIDC_PRIVATE_KEY
|
||||
- key: "OIDC_HMAC_SECRET"
|
||||
path: OIDC_HMAC_SECRET
|
||||
{{- end }}
|
||||
{{- end -}}
|
||||
|
||||
{{- $_ := set .Values.persistence "authelia-configfile" (include "authelia.configmapVolume" . | fromYaml) -}}
|
||||
{{- $_ := set .Values.persistence "authelia-secrets" (include "authelia.secretVolumes" . | fromYaml) -}}
|
||||
|
||||
|
||||
{{/* Render the templates */}}
|
||||
{{ include "tc.common.loader.apply" . }}
|
||||
@@ -1,99 +0,0 @@
|
||||
# Changelog
|
||||
|
||||
|
||||
## [bazarr-11.0.13](https://github.com/truecharts/apps/compare/bazarr-11.0.12...bazarr-11.0.13) (2022-07-12)
|
||||
|
||||
### Chore
|
||||
|
||||
- bump to regenerate documentation
|
||||
|
||||
|
||||
|
||||
<a name="bazarr-11.0.12"></a>
|
||||
### [bazarr-11.0.12](https://github.com/truecharts/apps/compare/bazarr-11.0.11...bazarr-11.0.12) (2022-07-12)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#3147](https://github.com/truecharts/apps/issues/3147))
|
||||
|
||||
|
||||
|
||||
<a name="bazarr-11.0.11"></a>
|
||||
### [bazarr-11.0.11](https://github.com/truecharts/apps/compare/bazarr-11.0.10...bazarr-11.0.11) (2022-07-11)
|
||||
|
||||
#### Chore
|
||||
|
||||
* move icons into the apps folder ([#3139](https://github.com/truecharts/apps/issues/3139))
|
||||
|
||||
|
||||
|
||||
<a name="bazarr-11.0.10"></a>
|
||||
### [bazarr-11.0.10](https://github.com/truecharts/apps/compare/bazarr-11.0.9...bazarr-11.0.10) (2022-07-09)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#3113](https://github.com/truecharts/apps/issues/3113))
|
||||
|
||||
|
||||
|
||||
<a name="bazarr-11.0.9"></a>
|
||||
### [bazarr-11.0.9](https://github.com/truecharts/apps/compare/bazarr-11.0.8...bazarr-11.0.9) (2022-07-04)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#3066](https://github.com/truecharts/apps/issues/3066))
|
||||
|
||||
|
||||
|
||||
<a name="bazarr-11.0.8"></a>
|
||||
### [bazarr-11.0.8](https://github.com/truecharts/apps/compare/bazarr-11.0.7...bazarr-11.0.8) (2022-07-03)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update docker general non-major ([#3052](https://github.com/truecharts/apps/issues/3052))
|
||||
|
||||
|
||||
|
||||
<a name="bazarr-11.0.7"></a>
|
||||
### [bazarr-11.0.7](https://github.com/truecharts/apps/compare/bazarr-11.0.6...bazarr-11.0.7) (2022-06-25)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#2977](https://github.com/truecharts/apps/issues/2977))
|
||||
|
||||
|
||||
|
||||
<a name="bazarr-11.0.6"></a>
|
||||
### [bazarr-11.0.6](https://github.com/truecharts/apps/compare/bazarr-11.0.5...bazarr-11.0.6) (2022-06-22)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#2948](https://github.com/truecharts/apps/issues/2948))
|
||||
|
||||
|
||||
|
||||
<a name="bazarr-11.0.5"></a>
|
||||
### [bazarr-11.0.5](https://github.com/truecharts/apps/compare/bazarr-11.0.4...bazarr-11.0.5) (2022-06-21)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#2943](https://github.com/truecharts/apps/issues/2943))
|
||||
* update docker general non-major ([#2931](https://github.com/truecharts/apps/issues/2931))
|
||||
|
||||
|
||||
|
||||
<a name="bazarr-11.0.4"></a>
|
||||
### [bazarr-11.0.4](https://github.com/truecharts/apps/compare/bazarr-11.0.3...bazarr-11.0.4) (2022-06-14)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#2886](https://github.com/truecharts/apps/issues/2886))
|
||||
|
||||
|
||||
|
||||
<a name="bazarr-11.0.3"></a>
|
||||
### [bazarr-11.0.3](https://github.com/truecharts/apps/compare/bazarr-11.0.2...bazarr-11.0.3) (2022-06-11)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#2854](https://github.com/truecharts/apps/issues/2854))
|
||||
@@ -1,6 +0,0 @@
|
||||
dependencies:
|
||||
- name: common
|
||||
repository: https://library-charts.truecharts.org
|
||||
version: 10.4.4
|
||||
digest: sha256:e76f58e980866194e06f0e9135c981662f0b1132d3c5848dbf344c48ab657396
|
||||
generated: "2022-07-12T20:49:36.917476667Z"
|
||||
@@ -1,34 +0,0 @@
|
||||
apiVersion: v2
|
||||
appVersion: "1.1.0"
|
||||
dependencies:
|
||||
- name: common
|
||||
repository: https://library-charts.truecharts.org
|
||||
version: 10.4.4
|
||||
deprecated: false
|
||||
description: Bazarr is a companion application to Sonarr and Radarr. It manages and
|
||||
downloads subtitles based on your requirements
|
||||
home: https://github.com/truecharts/apps/tree/master/charts/stable/bazarr
|
||||
icon: https://truecharts.org/img/appicons/bazarr.png
|
||||
keywords:
|
||||
- bazarr
|
||||
- radarr
|
||||
- sonarr
|
||||
- subtitles
|
||||
- usenet
|
||||
- torrent
|
||||
kubeVersion: '>=1.16.0-0'
|
||||
maintainers:
|
||||
- email: info@truecharts.org
|
||||
name: TrueCharts
|
||||
url: https://truecharts.org
|
||||
name: bazarr
|
||||
sources:
|
||||
- https://github.com/morpheus65535/bazarr
|
||||
- https://hub.docker.com/r/linuxserver/bazarr
|
||||
type: application
|
||||
version: 11.0.13
|
||||
annotations:
|
||||
truecharts.org/catagories: |
|
||||
- media
|
||||
truecharts.org/SCALE-support: "true"
|
||||
truecharts.org/grade: U
|
||||
@@ -1,43 +0,0 @@
|
||||
# bazarr
|
||||
|
||||
Bazarr is a companion application to Sonarr and Radarr. It manages and downloads subtitles based on your requirements
|
||||
|
||||
TrueCharts are designed to be installed as TrueNAS SCALE app only. We can not guarantee this charts works as a stand-alone helm installation.
|
||||
**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/apps/issues/new/choose)**
|
||||
|
||||
## Source Code
|
||||
|
||||
* <https://github.com/morpheus65535/bazarr>
|
||||
* <https://hub.docker.com/r/linuxserver/bazarr>
|
||||
|
||||
## Requirements
|
||||
|
||||
Kubernetes: `>=1.16.0-0`
|
||||
|
||||
## Dependencies
|
||||
|
||||
| Repository | Name | Version |
|
||||
|------------|------|---------|
|
||||
| https://library-charts.truecharts.org | common | 10.4.4 |
|
||||
|
||||
## Installing the Chart
|
||||
|
||||
To install this App on TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/02-Installing-an-App/).
|
||||
|
||||
## Upgrading, Rolling Back and Uninstalling the Chart
|
||||
|
||||
To upgrade, rollback or delete this App from TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/04-Upgrade-rollback-delete-an-App/).
|
||||
|
||||
##### Connecting to other apps
|
||||
If you need to connect this App to other Apps on TrueNAS SCALE, please refer to our [Linking Apps Internally](https://truecharts.org/manual/Quick-Start%20Guides/06-linking-apps/) quick-start guide.
|
||||
|
||||
## Support
|
||||
|
||||
- Please check our [quick-start guides](https://truecharts.org/manual/Quick-Start%20Guides/01-Adding-TrueCharts/) first.
|
||||
- See the [Wiki](https://truecharts.org)
|
||||
- Check our [Discord](https://discord.gg/tVsPTHWTtr)
|
||||
- Open a [issue](https://github.com/truecharts/apps/issues/new/choose)
|
||||
|
||||
---
|
||||
|
||||
All Rights Reserved - The TrueCharts Project
|
||||
@@ -1,3 +0,0 @@
|
||||
Bazarr is a companion application to Sonarr and Radarr. It manages and downloads subtitles based on your requirements
|
||||
|
||||
This App is supplied by TrueCharts, for more information please visit https://truecharts.org
|
||||
Binary file not shown.
Binary file not shown.
|
Before Width: | Height: | Size: 9.9 KiB |
@@ -1,16 +0,0 @@
|
||||
image:
|
||||
repository: tccr.io/truecharts/bazarr
|
||||
pullPolicy: IfNotPresent
|
||||
tag: v1.1.0@sha256:a01c16ac04b57b145cf75b8f1d2b4eef2f3c36970d0578b2740047de04c242d9
|
||||
|
||||
service:
|
||||
main:
|
||||
ports:
|
||||
main:
|
||||
port: 6767
|
||||
targetPort: 6767
|
||||
|
||||
persistence:
|
||||
config:
|
||||
enabled: true
|
||||
mountPath: "/config"
|
||||
File diff suppressed because it is too large
Load Diff
@@ -1 +0,0 @@
|
||||
{{ include "tc.common.loader.all" . }}
|
||||
@@ -1,99 +0,0 @@
|
||||
# Changelog
|
||||
|
||||
|
||||
## [calibre-web-11.0.15](https://github.com/truecharts/apps/compare/calibre-web-11.0.14...calibre-web-11.0.15) (2022-07-12)
|
||||
|
||||
### Chore
|
||||
|
||||
- bump to regenerate documentation
|
||||
|
||||
|
||||
|
||||
<a name="calibre-web-11.0.14"></a>
|
||||
### [calibre-web-11.0.14](https://github.com/truecharts/apps/compare/calibre-web-11.0.13...calibre-web-11.0.14) (2022-07-12)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#3147](https://github.com/truecharts/apps/issues/3147))
|
||||
* update docker general non-major ([#3150](https://github.com/truecharts/apps/issues/3150))
|
||||
|
||||
|
||||
|
||||
<a name="calibre-web-11.0.13"></a>
|
||||
### [calibre-web-11.0.13](https://github.com/truecharts/apps/compare/calibre-web-11.0.12...calibre-web-11.0.13) (2022-07-11)
|
||||
|
||||
#### Chore
|
||||
|
||||
* move icons into the apps folder ([#3139](https://github.com/truecharts/apps/issues/3139))
|
||||
|
||||
|
||||
|
||||
<a name="calibre-web-11.0.12"></a>
|
||||
### [calibre-web-11.0.12](https://github.com/truecharts/apps/compare/calibre-web-11.0.11...calibre-web-11.0.12) (2022-07-09)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#3113](https://github.com/truecharts/apps/issues/3113))
|
||||
|
||||
|
||||
|
||||
<a name="calibre-web-11.0.11"></a>
|
||||
### [calibre-web-11.0.11](https://github.com/truecharts/apps/compare/calibre-web-11.0.10...calibre-web-11.0.11) (2022-07-04)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#3066](https://github.com/truecharts/apps/issues/3066))
|
||||
|
||||
|
||||
|
||||
<a name="calibre-web-11.0.10"></a>
|
||||
### [calibre-web-11.0.10](https://github.com/truecharts/apps/compare/calibre-web-11.0.9...calibre-web-11.0.10) (2022-06-29)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update docker general non-major ([#3002](https://github.com/truecharts/apps/issues/3002))
|
||||
|
||||
|
||||
|
||||
<a name="calibre-web-11.0.9"></a>
|
||||
### [calibre-web-11.0.9](https://github.com/truecharts/apps/compare/calibre-web-11.0.8...calibre-web-11.0.9) (2022-06-25)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#2977](https://github.com/truecharts/apps/issues/2977))
|
||||
|
||||
|
||||
|
||||
<a name="calibre-web-11.0.8"></a>
|
||||
### [calibre-web-11.0.8](https://github.com/truecharts/apps/compare/calibre-web-11.0.7...calibre-web-11.0.8) (2022-06-22)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update docker general non-major ([#2954](https://github.com/truecharts/apps/issues/2954))
|
||||
* update helm general non-major helm releases ([#2948](https://github.com/truecharts/apps/issues/2948))
|
||||
|
||||
|
||||
|
||||
<a name="calibre-web-11.0.7"></a>
|
||||
### [calibre-web-11.0.7](https://github.com/truecharts/apps/compare/calibre-web-11.0.6...calibre-web-11.0.7) (2022-06-21)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#2943](https://github.com/truecharts/apps/issues/2943))
|
||||
|
||||
|
||||
|
||||
<a name="calibre-web-11.0.6"></a>
|
||||
### [calibre-web-11.0.6](https://github.com/truecharts/apps/compare/calibre-web-11.0.5...calibre-web-11.0.6) (2022-06-15)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update docker general non-major ([#2890](https://github.com/truecharts/apps/issues/2890))
|
||||
|
||||
|
||||
|
||||
<a name="calibre-web-11.0.5"></a>
|
||||
### [calibre-web-11.0.5](https://github.com/truecharts/apps/compare/calibre-web-11.0.4...calibre-web-11.0.5) (2022-06-14)
|
||||
|
||||
#### Chore
|
||||
|
||||
@@ -1,6 +0,0 @@
|
||||
dependencies:
|
||||
- name: common
|
||||
repository: https://library-charts.truecharts.org
|
||||
version: 10.4.4
|
||||
digest: sha256:e76f58e980866194e06f0e9135c981662f0b1132d3c5848dbf344c48ab657396
|
||||
generated: "2022-07-12T20:50:23.958852916Z"
|
||||
@@ -1,31 +0,0 @@
|
||||
apiVersion: v2
|
||||
appVersion: "0.6.18"
|
||||
dependencies:
|
||||
- name: common
|
||||
repository: https://library-charts.truecharts.org
|
||||
version: 10.4.4
|
||||
deprecated: false
|
||||
description: Calibre-Web is a web app providing a clean interface for browsing, reading
|
||||
and downloading eBooks using an existing Calibre database.
|
||||
home: https://github.com/truecharts/apps/tree/master/charts/stable/calibre-web
|
||||
icon: https://truecharts.org/img/appicons/calibre-web.png
|
||||
keywords:
|
||||
- calibre-web
|
||||
- calibre
|
||||
- ebook
|
||||
kubeVersion: '>=1.16.0-0'
|
||||
maintainers:
|
||||
- email: info@truecharts.org
|
||||
name: TrueCharts
|
||||
url: https://truecharts.org
|
||||
name: calibre-web
|
||||
sources:
|
||||
- https://hub.docker.com/r/linuxserver/calibre-web/
|
||||
- https://github.com/janeczku/calibre-web
|
||||
type: application
|
||||
version: 11.0.15
|
||||
annotations:
|
||||
truecharts.org/catagories: |
|
||||
- media
|
||||
truecharts.org/SCALE-support: "true"
|
||||
truecharts.org/grade: U
|
||||
@@ -1,43 +0,0 @@
|
||||
# calibre-web
|
||||
|
||||
Calibre-Web is a web app providing a clean interface for browsing, reading and downloading eBooks using an existing Calibre database.
|
||||
|
||||
TrueCharts are designed to be installed as TrueNAS SCALE app only. We can not guarantee this charts works as a stand-alone helm installation.
|
||||
**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/apps/issues/new/choose)**
|
||||
|
||||
## Source Code
|
||||
|
||||
* <https://hub.docker.com/r/linuxserver/calibre-web/>
|
||||
* <https://github.com/janeczku/calibre-web>
|
||||
|
||||
## Requirements
|
||||
|
||||
Kubernetes: `>=1.16.0-0`
|
||||
|
||||
## Dependencies
|
||||
|
||||
| Repository | Name | Version |
|
||||
|------------|------|---------|
|
||||
| https://library-charts.truecharts.org | common | 10.4.4 |
|
||||
|
||||
## Installing the Chart
|
||||
|
||||
To install this App on TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/02-Installing-an-App/).
|
||||
|
||||
## Upgrading, Rolling Back and Uninstalling the Chart
|
||||
|
||||
To upgrade, rollback or delete this App from TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/04-Upgrade-rollback-delete-an-App/).
|
||||
|
||||
##### Connecting to other apps
|
||||
If you need to connect this App to other Apps on TrueNAS SCALE, please refer to our [Linking Apps Internally](https://truecharts.org/manual/Quick-Start%20Guides/06-linking-apps/) quick-start guide.
|
||||
|
||||
## Support
|
||||
|
||||
- Please check our [quick-start guides](https://truecharts.org/manual/Quick-Start%20Guides/01-Adding-TrueCharts/) first.
|
||||
- See the [Wiki](https://truecharts.org)
|
||||
- Check our [Discord](https://discord.gg/tVsPTHWTtr)
|
||||
- Open a [issue](https://github.com/truecharts/apps/issues/new/choose)
|
||||
|
||||
---
|
||||
|
||||
All Rights Reserved - The TrueCharts Project
|
||||
@@ -1,3 +0,0 @@
|
||||
Calibre-Web is a web app providing a clean interface for browsing, reading and downloading eBooks using an existing Calibre database.
|
||||
|
||||
This App is supplied by TrueCharts, for more information please visit https://truecharts.org
|
||||
Binary file not shown.
Binary file not shown.
|
Before Width: | Height: | Size: 11 KiB |
@@ -1,24 +0,0 @@
|
||||
image:
|
||||
repository: tccr.io/truecharts/calibre-web
|
||||
pullPolicy: IfNotPresent
|
||||
tag: v0.6.18@sha256:ee75eee7e3b7cb86125c831edc28fb2a425e0121bbc167a914039bc9791461e3
|
||||
|
||||
securityContext:
|
||||
readOnlyRootFilesystem: false
|
||||
runAsNonRoot: false
|
||||
|
||||
podSecurityContext:
|
||||
runAsUser: 0
|
||||
runAsGroup: 0
|
||||
|
||||
service:
|
||||
main:
|
||||
ports:
|
||||
main:
|
||||
port: 8083
|
||||
targetPort: 8083
|
||||
|
||||
persistence:
|
||||
config:
|
||||
enabled: true
|
||||
mountPath: "/config"
|
||||
File diff suppressed because it is too large
Load Diff
@@ -1 +0,0 @@
|
||||
{{ include "tc.common.loader.all" . }}
|
||||
@@ -1,99 +0,0 @@
|
||||
# Changelog
|
||||
|
||||
|
||||
## [deluge-11.0.14](https://github.com/truecharts/apps/compare/deluge-11.0.13...deluge-11.0.14) (2022-07-12)
|
||||
|
||||
### Chore
|
||||
|
||||
- bump to regenerate documentation
|
||||
|
||||
|
||||
|
||||
<a name="deluge-11.0.13"></a>
|
||||
### [deluge-11.0.13](https://github.com/truecharts/apps/compare/deluge-11.0.12...deluge-11.0.13) (2022-07-12)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#3147](https://github.com/truecharts/apps/issues/3147))
|
||||
|
||||
|
||||
|
||||
<a name="deluge-11.0.12"></a>
|
||||
### [deluge-11.0.12](https://github.com/truecharts/apps/compare/deluge-11.0.11...deluge-11.0.12) (2022-07-11)
|
||||
|
||||
#### Chore
|
||||
|
||||
* move icons into the apps folder ([#3139](https://github.com/truecharts/apps/issues/3139))
|
||||
|
||||
|
||||
|
||||
<a name="deluge-11.0.11"></a>
|
||||
### [deluge-11.0.11](https://github.com/truecharts/apps/compare/deluge-11.0.10...deluge-11.0.11) (2022-07-10)
|
||||
|
||||
#### Fix
|
||||
|
||||
* revert combine ports ([#3119](https://github.com/truecharts/apps/issues/3119))
|
||||
|
||||
|
||||
|
||||
<a name="deluge-11.0.10"></a>
|
||||
### [deluge-11.0.10](https://github.com/truecharts/apps/compare/deluge-11.0.9...deluge-11.0.10) (2022-07-09)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#3113](https://github.com/truecharts/apps/issues/3113))
|
||||
|
||||
|
||||
|
||||
<a name="deluge-11.0.9"></a>
|
||||
### [deluge-11.0.9](https://github.com/truecharts/apps/compare/deluge-11.0.8...deluge-11.0.9) (2022-07-09)
|
||||
|
||||
#### Chore
|
||||
|
||||
* combine some ports ([#3096](https://github.com/truecharts/apps/issues/3096))
|
||||
|
||||
|
||||
|
||||
<a name="deluge-11.0.8"></a>
|
||||
### [deluge-11.0.8](https://github.com/truecharts/apps/compare/deluge-11.0.7...deluge-11.0.8) (2022-07-04)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#3066](https://github.com/truecharts/apps/issues/3066))
|
||||
|
||||
|
||||
|
||||
<a name="deluge-11.0.7"></a>
|
||||
### [deluge-11.0.7](https://github.com/truecharts/apps/compare/deluge-11.0.6...deluge-11.0.7) (2022-06-25)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#2977](https://github.com/truecharts/apps/issues/2977))
|
||||
|
||||
|
||||
|
||||
<a name="deluge-11.0.6"></a>
|
||||
### [deluge-11.0.6](https://github.com/truecharts/apps/compare/deluge-11.0.5...deluge-11.0.6) (2022-06-22)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#2948](https://github.com/truecharts/apps/issues/2948))
|
||||
|
||||
|
||||
|
||||
<a name="deluge-11.0.5"></a>
|
||||
### [deluge-11.0.5](https://github.com/truecharts/apps/compare/deluge-11.0.4...deluge-11.0.5) (2022-06-21)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#2943](https://github.com/truecharts/apps/issues/2943))
|
||||
|
||||
|
||||
|
||||
<a name="deluge-11.0.4"></a>
|
||||
### [deluge-11.0.4](https://github.com/truecharts/apps/compare/deluge-11.0.3...deluge-11.0.4) (2022-06-14)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#2886](https://github.com/truecharts/apps/issues/2886))
|
||||
|
||||
@@ -1,6 +0,0 @@
|
||||
dependencies:
|
||||
- name: common
|
||||
repository: https://library-charts.truecharts.org
|
||||
version: 10.4.4
|
||||
digest: sha256:e76f58e980866194e06f0e9135c981662f0b1132d3c5848dbf344c48ab657396
|
||||
generated: "2022-07-12T20:51:53.676567101Z"
|
||||
@@ -1,29 +0,0 @@
|
||||
apiVersion: v2
|
||||
appVersion: "2.0.5"
|
||||
dependencies:
|
||||
- name: common
|
||||
repository: https://library-charts.truecharts.org
|
||||
version: 10.4.4
|
||||
deprecated: false
|
||||
description: Deluge App for TrueNAS SCALE
|
||||
home: https://github.com/truecharts/apps/tree/master/charts/stable/deluge
|
||||
icon: https://truecharts.org/img/appicons/deluge.png
|
||||
keywords:
|
||||
- transmission
|
||||
- torrent
|
||||
- usenet
|
||||
kubeVersion: '>=1.16.0-0'
|
||||
maintainers:
|
||||
- email: info@truecharts.org
|
||||
name: TrueCharts
|
||||
url: https://truecharts.org
|
||||
name: deluge
|
||||
sources:
|
||||
- https://github.com/deluge-torrent/deluge
|
||||
type: application
|
||||
version: 11.0.14
|
||||
annotations:
|
||||
truecharts.org/catagories: |
|
||||
- media
|
||||
truecharts.org/SCALE-support: "true"
|
||||
truecharts.org/grade: U
|
||||
@@ -1,42 +0,0 @@
|
||||
# deluge
|
||||
|
||||
Deluge App for TrueNAS SCALE
|
||||
|
||||
TrueCharts are designed to be installed as TrueNAS SCALE app only. We can not guarantee this charts works as a stand-alone helm installation.
|
||||
**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/apps/issues/new/choose)**
|
||||
|
||||
## Source Code
|
||||
|
||||
* <https://github.com/deluge-torrent/deluge>
|
||||
|
||||
## Requirements
|
||||
|
||||
Kubernetes: `>=1.16.0-0`
|
||||
|
||||
## Dependencies
|
||||
|
||||
| Repository | Name | Version |
|
||||
|------------|------|---------|
|
||||
| https://library-charts.truecharts.org | common | 10.4.4 |
|
||||
|
||||
## Installing the Chart
|
||||
|
||||
To install this App on TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/02-Installing-an-App/).
|
||||
|
||||
## Upgrading, Rolling Back and Uninstalling the Chart
|
||||
|
||||
To upgrade, rollback or delete this App from TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/04-Upgrade-rollback-delete-an-App/).
|
||||
|
||||
##### Connecting to other apps
|
||||
If you need to connect this App to other Apps on TrueNAS SCALE, please refer to our [Linking Apps Internally](https://truecharts.org/manual/Quick-Start%20Guides/06-linking-apps/) quick-start guide.
|
||||
|
||||
## Support
|
||||
|
||||
- Please check our [quick-start guides](https://truecharts.org/manual/Quick-Start%20Guides/01-Adding-TrueCharts/) first.
|
||||
- See the [Wiki](https://truecharts.org)
|
||||
- Check our [Discord](https://discord.gg/tVsPTHWTtr)
|
||||
- Open a [issue](https://github.com/truecharts/apps/issues/new/choose)
|
||||
|
||||
---
|
||||
|
||||
All Rights Reserved - The TrueCharts Project
|
||||
@@ -1,3 +0,0 @@
|
||||
Deluge App for TrueNAS SCALE
|
||||
|
||||
This App is supplied by TrueCharts, for more information please visit https://truecharts.org
|
||||
Binary file not shown.
Binary file not shown.
|
Before Width: | Height: | Size: 13 KiB |
@@ -1,41 +0,0 @@
|
||||
image:
|
||||
repository: tccr.io/truecharts/deluge
|
||||
pullPolicy: IfNotPresent
|
||||
tag: v2.0.5@sha256:18dc16d8e448ece00534e17f9e226a781320b9939f4194e12481e6d1156ed23b
|
||||
|
||||
securityContext:
|
||||
runAsNonRoot: false
|
||||
readOnlyRootFilesystem: false
|
||||
|
||||
podSecurityContext:
|
||||
runAsUser: 0
|
||||
runAsGroup: 0
|
||||
|
||||
service:
|
||||
main:
|
||||
ports:
|
||||
main:
|
||||
port: 8112
|
||||
targetPort: 8112
|
||||
torrent:
|
||||
enabled: true
|
||||
ports:
|
||||
tcp:
|
||||
enabled: true
|
||||
port: 51413
|
||||
targetPort: 51413
|
||||
torrent-udp:
|
||||
enabled: true
|
||||
ports:
|
||||
udp:
|
||||
enabled: true
|
||||
port: 51413
|
||||
targetPort: 51413
|
||||
protocol: UDP
|
||||
|
||||
persistence:
|
||||
config:
|
||||
enabled: true
|
||||
mountPath: "/config"
|
||||
varrun:
|
||||
enabled: true
|
||||
File diff suppressed because it is too large
Load Diff
@@ -1 +0,0 @@
|
||||
{{ include "tc.common.loader.all" . }}
|
||||
@@ -1,99 +0,0 @@
|
||||
# Changelog
|
||||
|
||||
|
||||
## [emby-11.0.12](https://github.com/truecharts/apps/compare/embystat-2.0.11...emby-11.0.12) (2022-07-12)
|
||||
|
||||
### Chore
|
||||
|
||||
- bump to regenerate documentation
|
||||
|
||||
|
||||
|
||||
<a name="emby-11.0.11"></a>
|
||||
### [emby-11.0.11](https://github.com/truecharts/apps/compare/emby-11.0.10...emby-11.0.11) (2022-07-12)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#3147](https://github.com/truecharts/apps/issues/3147))
|
||||
|
||||
|
||||
|
||||
<a name="emby-11.0.10"></a>
|
||||
### [emby-11.0.10](https://github.com/truecharts/apps/compare/embystat-2.0.9...emby-11.0.10) (2022-07-11)
|
||||
|
||||
#### Chore
|
||||
|
||||
* move icons into the apps folder ([#3139](https://github.com/truecharts/apps/issues/3139))
|
||||
|
||||
|
||||
|
||||
<a name="emby-11.0.9"></a>
|
||||
### [emby-11.0.9](https://github.com/truecharts/apps/compare/embystat-2.0.8...emby-11.0.9) (2022-07-09)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#3113](https://github.com/truecharts/apps/issues/3113))
|
||||
|
||||
|
||||
|
||||
<a name="emby-11.0.8"></a>
|
||||
### [emby-11.0.8](https://github.com/truecharts/apps/compare/embystat-2.0.7...emby-11.0.8) (2022-07-04)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#3066](https://github.com/truecharts/apps/issues/3066))
|
||||
|
||||
|
||||
|
||||
<a name="emby-11.0.7"></a>
|
||||
### [emby-11.0.7](https://github.com/truecharts/apps/compare/embystat-2.0.6...emby-11.0.7) (2022-06-25)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#2977](https://github.com/truecharts/apps/issues/2977))
|
||||
|
||||
|
||||
|
||||
<a name="emby-11.0.6"></a>
|
||||
### [emby-11.0.6](https://github.com/truecharts/apps/compare/embystat-2.0.5...emby-11.0.6) (2022-06-22)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update docker general non-major ([#2954](https://github.com/truecharts/apps/issues/2954))
|
||||
* update helm general non-major helm releases ([#2948](https://github.com/truecharts/apps/issues/2948))
|
||||
|
||||
|
||||
|
||||
<a name="emby-11.0.5"></a>
|
||||
### [emby-11.0.5](https://github.com/truecharts/apps/compare/embystat-2.0.4...emby-11.0.5) (2022-06-21)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#2943](https://github.com/truecharts/apps/issues/2943))
|
||||
* update docker general non-major ([#2931](https://github.com/truecharts/apps/issues/2931))
|
||||
|
||||
|
||||
|
||||
<a name="emby-11.0.4"></a>
|
||||
### [emby-11.0.4](https://github.com/truecharts/apps/compare/embystat-2.0.3...emby-11.0.4) (2022-06-14)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#2886](https://github.com/truecharts/apps/issues/2886))
|
||||
|
||||
|
||||
|
||||
<a name="emby-11.0.3"></a>
|
||||
### [emby-11.0.3](https://github.com/truecharts/apps/compare/emby-11.0.2...emby-11.0.3) (2022-06-11)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#2854](https://github.com/truecharts/apps/issues/2854))
|
||||
|
||||
|
||||
|
||||
<a name="emby-11.0.2"></a>
|
||||
### [emby-11.0.2](https://github.com/truecharts/apps/compare/emby-11.0.1...emby-11.0.2) (2022-06-07)
|
||||
|
||||
#### Fix
|
||||
|
||||
@@ -1,6 +0,0 @@
|
||||
dependencies:
|
||||
- name: common
|
||||
repository: https://library-charts.truecharts.org
|
||||
version: 10.4.4
|
||||
digest: sha256:e76f58e980866194e06f0e9135c981662f0b1132d3c5848dbf344c48ab657396
|
||||
generated: "2022-07-12T20:52:50.297135958Z"
|
||||
@@ -1,30 +0,0 @@
|
||||
apiVersion: v2
|
||||
appVersion: "4.7.4.0"
|
||||
dependencies:
|
||||
- name: common
|
||||
repository: https://library-charts.truecharts.org
|
||||
version: 10.4.4
|
||||
deprecated: false
|
||||
description: Emby Server is a home media server
|
||||
home: https://github.com/truecharts/apps/tree/master/charts/stable/emby
|
||||
icon: https://truecharts.org/img/appicons/emby.png
|
||||
keywords:
|
||||
- jellyfin
|
||||
- plex
|
||||
- emby
|
||||
kubeVersion: '>=1.16.0-0'
|
||||
maintainers:
|
||||
- email: info@truecharts.org
|
||||
name: TrueCharts
|
||||
url: https://truecharts.org
|
||||
name: emby
|
||||
sources:
|
||||
- https://hub.docker.com/r/linuxserver/emby
|
||||
- https://github.com/linuxserver/docker-emby.git
|
||||
type: application
|
||||
version: 11.0.12
|
||||
annotations:
|
||||
truecharts.org/catagories: |
|
||||
- media
|
||||
truecharts.org/SCALE-support: "true"
|
||||
truecharts.org/grade: U
|
||||
@@ -1,43 +0,0 @@
|
||||
# emby
|
||||
|
||||
Emby Server is a home media server
|
||||
|
||||
TrueCharts are designed to be installed as TrueNAS SCALE app only. We can not guarantee this charts works as a stand-alone helm installation.
|
||||
**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/apps/issues/new/choose)**
|
||||
|
||||
## Source Code
|
||||
|
||||
* <https://hub.docker.com/r/linuxserver/emby>
|
||||
* <https://github.com/linuxserver/docker-emby.git>
|
||||
|
||||
## Requirements
|
||||
|
||||
Kubernetes: `>=1.16.0-0`
|
||||
|
||||
## Dependencies
|
||||
|
||||
| Repository | Name | Version |
|
||||
|------------|------|---------|
|
||||
| https://library-charts.truecharts.org | common | 10.4.4 |
|
||||
|
||||
## Installing the Chart
|
||||
|
||||
To install this App on TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/02-Installing-an-App/).
|
||||
|
||||
## Upgrading, Rolling Back and Uninstalling the Chart
|
||||
|
||||
To upgrade, rollback or delete this App from TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/04-Upgrade-rollback-delete-an-App/).
|
||||
|
||||
##### Connecting to other apps
|
||||
If you need to connect this App to other Apps on TrueNAS SCALE, please refer to our [Linking Apps Internally](https://truecharts.org/manual/Quick-Start%20Guides/06-linking-apps/) quick-start guide.
|
||||
|
||||
## Support
|
||||
|
||||
- Please check our [quick-start guides](https://truecharts.org/manual/Quick-Start%20Guides/01-Adding-TrueCharts/) first.
|
||||
- See the [Wiki](https://truecharts.org)
|
||||
- Check our [Discord](https://discord.gg/tVsPTHWTtr)
|
||||
- Open a [issue](https://github.com/truecharts/apps/issues/new/choose)
|
||||
|
||||
---
|
||||
|
||||
All Rights Reserved - The TrueCharts Project
|
||||
@@ -1,3 +0,0 @@
|
||||
Emby Server is a home media server
|
||||
|
||||
This App is supplied by TrueCharts, for more information please visit https://truecharts.org
|
||||
Binary file not shown.
Binary file not shown.
|
Before Width: | Height: | Size: 2.6 KiB |
@@ -1,19 +0,0 @@
|
||||
image:
|
||||
repository: tccr.io/truecharts/emby
|
||||
pullPolicy: IfNotPresent
|
||||
tag: v4.7.4.0@sha256:02ef31aa2040f82de124f8595140705ca403f8bbc74fd2682d7ddf6769877723
|
||||
|
||||
securityContext:
|
||||
readOnlyRootFilesystem: false
|
||||
|
||||
service:
|
||||
main:
|
||||
ports:
|
||||
main:
|
||||
port: 10079
|
||||
targetPort: 8096
|
||||
|
||||
persistence:
|
||||
config:
|
||||
enabled: true
|
||||
mountPath: "/config"
|
||||
File diff suppressed because it is too large
Load Diff
@@ -1 +0,0 @@
|
||||
{{ include "tc.common.loader.all" . }}
|
||||
@@ -1,99 +0,0 @@
|
||||
# Changelog
|
||||
|
||||
|
||||
## [esphome-11.0.14](https://github.com/truecharts/apps/compare/esphome-11.0.13...esphome-11.0.14) (2022-07-12)
|
||||
|
||||
### Chore
|
||||
|
||||
- bump to regenerate documentation
|
||||
|
||||
|
||||
|
||||
<a name="endlessh-2.0.11"></a>
|
||||
### [endlessh-2.0.11](https://github.com/truecharts/apps/compare/endlessh-2.0.10...endlessh-2.0.11) (2022-07-12)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#3147](https://github.com/truecharts/apps/issues/3147))
|
||||
|
||||
|
||||
|
||||
<a name="endlessh-2.0.10"></a>
|
||||
### [endlessh-2.0.10](https://github.com/truecharts/apps/compare/endlessh-2.0.9...endlessh-2.0.10) (2022-07-11)
|
||||
|
||||
#### Chore
|
||||
|
||||
* move icons into the apps folder ([#3139](https://github.com/truecharts/apps/issues/3139))
|
||||
|
||||
|
||||
|
||||
<a name="endlessh-2.0.9"></a>
|
||||
### [endlessh-2.0.9](https://github.com/truecharts/apps/compare/endlessh-2.0.8...endlessh-2.0.9) (2022-07-09)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#3113](https://github.com/truecharts/apps/issues/3113))
|
||||
|
||||
|
||||
|
||||
<a name="endlessh-2.0.8"></a>
|
||||
### [endlessh-2.0.8](https://github.com/truecharts/apps/compare/endlessh-2.0.7...endlessh-2.0.8) (2022-07-04)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#3066](https://github.com/truecharts/apps/issues/3066))
|
||||
|
||||
|
||||
|
||||
<a name="endlessh-2.0.7"></a>
|
||||
### [endlessh-2.0.7](https://github.com/truecharts/apps/compare/endlessh-2.0.6...endlessh-2.0.7) (2022-06-25)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#2977](https://github.com/truecharts/apps/issues/2977))
|
||||
|
||||
|
||||
|
||||
<a name="endlessh-2.0.6"></a>
|
||||
### [endlessh-2.0.6](https://github.com/truecharts/apps/compare/endlessh-2.0.5...endlessh-2.0.6) (2022-06-22)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#2948](https://github.com/truecharts/apps/issues/2948))
|
||||
|
||||
|
||||
|
||||
<a name="endlessh-2.0.5"></a>
|
||||
### [endlessh-2.0.5](https://github.com/truecharts/apps/compare/endlessh-2.0.4...endlessh-2.0.5) (2022-06-21)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#2943](https://github.com/truecharts/apps/issues/2943))
|
||||
|
||||
|
||||
|
||||
<a name="endlessh-2.0.4"></a>
|
||||
### [endlessh-2.0.4](https://github.com/truecharts/apps/compare/endlessh-2.0.3...endlessh-2.0.4) (2022-06-14)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#2886](https://github.com/truecharts/apps/issues/2886))
|
||||
|
||||
|
||||
|
||||
<a name="endlessh-2.0.3"></a>
|
||||
### [endlessh-2.0.3](https://github.com/truecharts/apps/compare/endlessh-2.0.2...endlessh-2.0.3) (2022-06-11)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#2854](https://github.com/truecharts/apps/issues/2854))
|
||||
|
||||
|
||||
|
||||
<a name="endlessh-2.0.2"></a>
|
||||
### [endlessh-2.0.2](https://github.com/truecharts/apps/compare/endlessh-2.0.1...endlessh-2.0.2) (2022-06-07)
|
||||
|
||||
#### Fix
|
||||
|
||||
* hotpatch to disable HPA and networkPolicy in SCALE interface, due to incompatible format.
|
||||
|
||||
@@ -1,6 +0,0 @@
|
||||
dependencies:
|
||||
- name: common
|
||||
repository: https://library-charts.truecharts.org
|
||||
version: 10.4.4
|
||||
digest: sha256:e76f58e980866194e06f0e9135c981662f0b1132d3c5848dbf344c48ab657396
|
||||
generated: "2022-07-12T20:53:06.570923932Z"
|
||||
@@ -1,29 +0,0 @@
|
||||
apiVersion: v2
|
||||
appVersion: "2022.6.2"
|
||||
dependencies:
|
||||
- name: common
|
||||
repository: https://library-charts.truecharts.org
|
||||
version: 10.4.4
|
||||
deprecated: false
|
||||
description: ESPHome is a system to control your ESP8266/ESP32 by simple yet powerful
|
||||
configuration files and control them remotely through Home Automation systems.
|
||||
home: https://github.com/truecharts/apps/tree/master/charts/stable/esphome
|
||||
icon: https://truecharts.org/img/appicons/esphome.png
|
||||
keywords:
|
||||
- esphome
|
||||
kubeVersion: '>=1.16.0-0'
|
||||
maintainers:
|
||||
- email: info@truecharts.org
|
||||
name: TrueCharts
|
||||
url: https://truecharts.org
|
||||
name: esphome
|
||||
sources:
|
||||
- https://github.com/esphome/esphome
|
||||
- https://hub.docker.com/u/esphome
|
||||
type: application
|
||||
version: 11.0.14
|
||||
annotations:
|
||||
truecharts.org/catagories: |
|
||||
- tools
|
||||
truecharts.org/SCALE-support: "true"
|
||||
truecharts.org/grade: U
|
||||
@@ -1,43 +0,0 @@
|
||||
# esphome
|
||||
|
||||
ESPHome is a system to control your ESP8266/ESP32 by simple yet powerful configuration files and control them remotely through Home Automation systems.
|
||||
|
||||
TrueCharts are designed to be installed as TrueNAS SCALE app only. We can not guarantee this charts works as a stand-alone helm installation.
|
||||
**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/apps/issues/new/choose)**
|
||||
|
||||
## Source Code
|
||||
|
||||
* <https://github.com/esphome/esphome>
|
||||
* <https://hub.docker.com/u/esphome>
|
||||
|
||||
## Requirements
|
||||
|
||||
Kubernetes: `>=1.16.0-0`
|
||||
|
||||
## Dependencies
|
||||
|
||||
| Repository | Name | Version |
|
||||
|------------|------|---------|
|
||||
| https://library-charts.truecharts.org | common | 10.4.4 |
|
||||
|
||||
## Installing the Chart
|
||||
|
||||
To install this App on TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/02-Installing-an-App/).
|
||||
|
||||
## Upgrading, Rolling Back and Uninstalling the Chart
|
||||
|
||||
To upgrade, rollback or delete this App from TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/04-Upgrade-rollback-delete-an-App/).
|
||||
|
||||
##### Connecting to other apps
|
||||
If you need to connect this App to other Apps on TrueNAS SCALE, please refer to our [Linking Apps Internally](https://truecharts.org/manual/Quick-Start%20Guides/06-linking-apps/) quick-start guide.
|
||||
|
||||
## Support
|
||||
|
||||
- Please check our [quick-start guides](https://truecharts.org/manual/Quick-Start%20Guides/01-Adding-TrueCharts/) first.
|
||||
- See the [Wiki](https://truecharts.org)
|
||||
- Check our [Discord](https://discord.gg/tVsPTHWTtr)
|
||||
- Open a [issue](https://github.com/truecharts/apps/issues/new/choose)
|
||||
|
||||
---
|
||||
|
||||
All Rights Reserved - The TrueCharts Project
|
||||
@@ -1,3 +0,0 @@
|
||||
ESPHome is a system to control your ESP8266/ESP32 by simple yet powerful configuration files and control them remotely through Home Automation systems.
|
||||
|
||||
This App is supplied by TrueCharts, for more information please visit https://truecharts.org
|
||||
Binary file not shown.
Binary file not shown.
|
Before Width: | Height: | Size: 4.7 KiB |
@@ -1,39 +0,0 @@
|
||||
image:
|
||||
repository: tccr.io/truecharts/esphome
|
||||
pullPolicy: IfNotPresent
|
||||
tag: v2022.6.2@sha256:7aae5257b855df0025d659f1d4f4bcfcb0b1b7391bcadcdb491ddd76f220e274
|
||||
|
||||
# App needs to run as root because of this: https://github.com/esphome/issues/issues/2752
|
||||
securityContext:
|
||||
runAsNonRoot: false
|
||||
readOnlyRootFilesystem: false
|
||||
privileged: true
|
||||
allowPrivilegeEscalation: true
|
||||
|
||||
podSecurityContext:
|
||||
runAsUser: 0
|
||||
runAsGroup: 0
|
||||
|
||||
service:
|
||||
main:
|
||||
ports:
|
||||
main:
|
||||
port: 6052
|
||||
targetPort: 6052
|
||||
|
||||
env: {}
|
||||
# ESPHOME_DASHBOARD_USE_PING: true
|
||||
# ESPHOME_DASHBOARD_RELATIVE_URL: "/"
|
||||
# ESPHOME_QUICKWIZARD:
|
||||
# ESPHOME_IS_HASSIO:
|
||||
# DISABLE_HA_AUTHENTICATION:
|
||||
# USERNAME:
|
||||
# PASSWORD:
|
||||
|
||||
persistence:
|
||||
config:
|
||||
enabled: true
|
||||
mountPath: "/config"
|
||||
platformio:
|
||||
enabled: true
|
||||
mountPath: "/.platformio"
|
||||
File diff suppressed because it is too large
Load Diff
@@ -1 +0,0 @@
|
||||
{{ include "tc.common.loader.all" . }}
|
||||
@@ -1,99 +0,0 @@
|
||||
# Changelog
|
||||
|
||||
|
||||
## [fireflyiii-16.0.15](https://github.com/truecharts/apps/compare/fireflyiii-16.0.14...fireflyiii-16.0.15) (2022-07-12)
|
||||
|
||||
### Chore
|
||||
|
||||
- bump to regenerate documentation
|
||||
|
||||
|
||||
|
||||
<a name="fireflyiii-16.0.14"></a>
|
||||
### [fireflyiii-16.0.14](https://github.com/truecharts/apps/compare/fireflyiii-16.0.13...fireflyiii-16.0.14) (2022-07-12)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#3147](https://github.com/truecharts/apps/issues/3147))
|
||||
|
||||
|
||||
|
||||
<a name="fireflyiii-16.0.13"></a>
|
||||
### [fireflyiii-16.0.13](https://github.com/truecharts/apps/compare/fireflyiii-16.0.12...fireflyiii-16.0.13) (2022-07-11)
|
||||
|
||||
#### Chore
|
||||
|
||||
* move icons into the apps folder ([#3139](https://github.com/truecharts/apps/issues/3139))
|
||||
* add markdownlint and cpell config files (and apply some linting) ([#3140](https://github.com/truecharts/apps/issues/3140))
|
||||
|
||||
|
||||
|
||||
<a name="fireflyiii-16.0.12"></a>
|
||||
### [fireflyiii-16.0.12](https://github.com/truecharts/apps/compare/fireflyiii-16.0.11...fireflyiii-16.0.12) (2022-07-09)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#3113](https://github.com/truecharts/apps/issues/3113))
|
||||
|
||||
|
||||
|
||||
<a name="fireflyiii-16.0.11"></a>
|
||||
### [fireflyiii-16.0.11](https://github.com/truecharts/apps/compare/fireflyiii-16.0.10...fireflyiii-16.0.11) (2022-07-05)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#3075](https://github.com/truecharts/apps/issues/3075))
|
||||
|
||||
|
||||
|
||||
<a name="fireflyiii-16.0.10"></a>
|
||||
### [fireflyiii-16.0.10](https://github.com/truecharts/apps/compare/fireflyiii-16.0.9...fireflyiii-16.0.10) (2022-07-04)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#3066](https://github.com/truecharts/apps/issues/3066))
|
||||
|
||||
|
||||
|
||||
<a name="fireflyiii-16.0.9"></a>
|
||||
### [fireflyiii-16.0.9](https://github.com/truecharts/apps/compare/fireflyiii-16.0.8...fireflyiii-16.0.9) (2022-06-25)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#2977](https://github.com/truecharts/apps/issues/2977))
|
||||
|
||||
|
||||
|
||||
<a name="fireflyiii-16.0.8"></a>
|
||||
### [fireflyiii-16.0.8](https://github.com/truecharts/apps/compare/fireflyiii-16.0.7...fireflyiii-16.0.8) (2022-06-22)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#2948](https://github.com/truecharts/apps/issues/2948))
|
||||
|
||||
|
||||
|
||||
<a name="fireflyiii-16.0.7"></a>
|
||||
### [fireflyiii-16.0.7](https://github.com/truecharts/apps/compare/fireflyiii-16.0.6...fireflyiii-16.0.7) (2022-06-21)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#2943](https://github.com/truecharts/apps/issues/2943))
|
||||
|
||||
|
||||
|
||||
<a name="fireflyiii-16.0.6"></a>
|
||||
### [fireflyiii-16.0.6](https://github.com/truecharts/apps/compare/fireflyiii-16.0.5...fireflyiii-16.0.6) (2022-06-17)
|
||||
|
||||
#### Chore
|
||||
|
||||
* Sync questions and values env's ([#2916](https://github.com/truecharts/apps/issues/2916))
|
||||
|
||||
|
||||
|
||||
<a name="fireflyiii-16.0.5"></a>
|
||||
### [fireflyiii-16.0.5](https://github.com/truecharts/apps/compare/fireflyiii-16.0.4...fireflyiii-16.0.5) (2022-06-14)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#2887](https://github.com/truecharts/apps/issues/2887))
|
||||
@@ -1,12 +0,0 @@
|
||||
dependencies:
|
||||
- name: common
|
||||
repository: https://library-charts.truecharts.org
|
||||
version: 10.4.4
|
||||
- name: postgresql
|
||||
repository: https://charts.truecharts.org/
|
||||
version: 8.0.30
|
||||
- name: redis
|
||||
repository: https://charts.truecharts.org
|
||||
version: 3.0.30
|
||||
digest: sha256:219b167cbd3e6d31f846ea247c9c12c15ece396a62777870f479b331a392bd5d
|
||||
generated: "2022-07-12T20:53:52.964402695Z"
|
||||
@@ -1,36 +0,0 @@
|
||||
apiVersion: v2
|
||||
appVersion: "5.7.9"
|
||||
dependencies:
|
||||
- name: common
|
||||
repository: https://library-charts.truecharts.org
|
||||
version: 10.4.4
|
||||
- condition: postgresql.enabled
|
||||
name: postgresql
|
||||
repository: https://charts.truecharts.org/
|
||||
version: 8.0.30
|
||||
- condition: redis.enabled
|
||||
name: redis
|
||||
repository: https://charts.truecharts.org
|
||||
version: 3.0.30
|
||||
deprecated: false
|
||||
description: A free and open source personal finance manager
|
||||
home: https://github.com/truecharts/apps/tree/master/charts/stable/fireflyiii
|
||||
icon: https://truecharts.org/img/appicons/fireflyiii.png
|
||||
keywords:
|
||||
- fireflyiii
|
||||
- finacial
|
||||
kubeVersion: '>=1.16.0-0'
|
||||
maintainers:
|
||||
- email: info@truecharts.org
|
||||
name: TrueCharts
|
||||
url: https://truecharts.org
|
||||
name: fireflyiii
|
||||
sources:
|
||||
- https://github.com/firefly-iii/firefly-iii/
|
||||
type: application
|
||||
version: 16.0.15
|
||||
annotations:
|
||||
truecharts.org/catagories: |
|
||||
- finacial
|
||||
truecharts.org/SCALE-support: "true"
|
||||
truecharts.org/grade: U
|
||||
@@ -1,44 +0,0 @@
|
||||
# fireflyiii
|
||||
|
||||
A free and open source personal finance manager
|
||||
|
||||
TrueCharts are designed to be installed as TrueNAS SCALE app only. We can not guarantee this charts works as a stand-alone helm installation.
|
||||
**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/apps/issues/new/choose)**
|
||||
|
||||
## Source Code
|
||||
|
||||
* <https://github.com/firefly-iii/firefly-iii/>
|
||||
|
||||
## Requirements
|
||||
|
||||
Kubernetes: `>=1.16.0-0`
|
||||
|
||||
## Dependencies
|
||||
|
||||
| Repository | Name | Version |
|
||||
|------------|------|---------|
|
||||
| https://charts.truecharts.org/ | postgresql | 8.0.30 |
|
||||
| https://charts.truecharts.org | redis | 3.0.30 |
|
||||
| https://library-charts.truecharts.org | common | 10.4.4 |
|
||||
|
||||
## Installing the Chart
|
||||
|
||||
To install this App on TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/02-Installing-an-App/).
|
||||
|
||||
## Upgrading, Rolling Back and Uninstalling the Chart
|
||||
|
||||
To upgrade, rollback or delete this App from TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/04-Upgrade-rollback-delete-an-App/).
|
||||
|
||||
##### Connecting to other apps
|
||||
If you need to connect this App to other Apps on TrueNAS SCALE, please refer to our [Linking Apps Internally](https://truecharts.org/manual/Quick-Start%20Guides/06-linking-apps/) quick-start guide.
|
||||
|
||||
## Support
|
||||
|
||||
- Please check our [quick-start guides](https://truecharts.org/manual/Quick-Start%20Guides/01-Adding-TrueCharts/) first.
|
||||
- See the [Wiki](https://truecharts.org)
|
||||
- Check our [Discord](https://discord.gg/tVsPTHWTtr)
|
||||
- Open a [issue](https://github.com/truecharts/apps/issues/new/choose)
|
||||
|
||||
---
|
||||
|
||||
All Rights Reserved - The TrueCharts Project
|
||||
@@ -1,3 +0,0 @@
|
||||
A free and open source personal finance manager
|
||||
|
||||
This App is supplied by TrueCharts, for more information please visit https://truecharts.org
|
||||
Binary file not shown.
Binary file not shown.
Binary file not shown.
@@ -1,5 +0,0 @@
|
||||
# Important Notes
|
||||
|
||||
The Firefly III developers have decided to split their program into multiple different add-on containers, implementing these ourselves into the App is EXTREMELY time-consuming. While we would appreciate people with experience building Helm Charts and adding the feature containers, we have decided to flag them "out of scope" for True Charts.
|
||||
|
||||
If you really want to use them, you can use custom-app or big-blue-button. However, we do not actively support such a setup.
|
||||
@@ -1,13 +0,0 @@
|
||||
# Input Validation
|
||||
|
||||
__`APP_KEY`__
|
||||
Accepted formats are:
|
||||
|
||||
- Letters, Numbers, Symbols, Exactly 32 characters (eg. `!oqVA9o2@br#$6vAyk8LLrDm54X5EtjD`) - It accepts `a-z`, `A-Z`, `0-9` and `!@#$%^&*?`
|
||||
|
||||
You can try live [here](https://regex101.com/r/OR879w/1)
|
||||
Regex used to match this: `[a-zA-Z0-9!@#$%^&*?]{32}`
|
||||
|
||||
---
|
||||
|
||||
_If you find a field that you think it needs validation, please open an issue on github_
|
||||
Binary file not shown.
|
Before Width: | Height: | Size: 14 KiB |
@@ -1,90 +0,0 @@
|
||||
image:
|
||||
repository: tccr.io/truecharts/fireflyiii-core
|
||||
pullPolicy: IfNotPresent
|
||||
tag: v5.7.9@sha256:73a5611fe5bc7b1580daa93424ec241f34dfc448d01225dc4535946617645e7c
|
||||
|
||||
securityContext:
|
||||
readOnlyRootFilesystem: false
|
||||
runAsNonRoot: false
|
||||
|
||||
podSecurityContext:
|
||||
runAsUser: 0
|
||||
runAsGroup: 0
|
||||
|
||||
service:
|
||||
main:
|
||||
ports:
|
||||
main:
|
||||
port: 10082
|
||||
targetPort: 8080
|
||||
|
||||
probes:
|
||||
liveness:
|
||||
path: "/login"
|
||||
|
||||
readiness:
|
||||
path: "/login"
|
||||
|
||||
startup:
|
||||
path: "/login"
|
||||
|
||||
env:
|
||||
DB_USERNAME: "{{ .Values.postgresql.postgresqlUsername }}"
|
||||
DB_DATABASE: "{{ .Values.postgresql.postgresqlDatabase }}"
|
||||
DB_CONNECTION: pgsql
|
||||
DB_PORT: 5432
|
||||
REDIS_DB: "0"
|
||||
REDIS_CACHE_DB: "1"
|
||||
CACHE_DRIVER: redis
|
||||
SESSION_DRIVER: redis
|
||||
REDIS_SCHEME: tcp
|
||||
REDIS_PORT: 6379
|
||||
APP_URL: ""
|
||||
TRUSTED_PROXIES: "172.16.0.0/16"
|
||||
DB_HOST:
|
||||
secretKeyRef:
|
||||
name: dbcreds
|
||||
key: plainhost
|
||||
DB_PASSWORD:
|
||||
secretKeyRef:
|
||||
name: dbcreds
|
||||
key: postgresql-password
|
||||
REDIS_HOST:
|
||||
secretKeyRef:
|
||||
name: rediscreds
|
||||
key: plainhost
|
||||
REDIS_PASSWORD:
|
||||
secretKeyRef:
|
||||
name: rediscreds
|
||||
key: redis-password
|
||||
STATIC_CRON_TOKEN:
|
||||
secretKeyRef:
|
||||
name: fireflyiii-secrets
|
||||
key: STATIC_CRON_TOKEN
|
||||
APP_KEY:
|
||||
secretKeyRef:
|
||||
name: fireflyiii-secrets
|
||||
key: APP_KEY
|
||||
|
||||
persistence:
|
||||
data:
|
||||
enabled: true
|
||||
mountPath: "/var/www/html/storage/upload"
|
||||
|
||||
cronjob:
|
||||
schedule: "0 3 * * *"
|
||||
annotations: {}
|
||||
failedJobsHistoryLimit: 5
|
||||
successfulJobsHistoryLimit: 2
|
||||
|
||||
# Enabled redis
|
||||
redis:
|
||||
enabled: true
|
||||
existingSecret: "rediscreds"
|
||||
|
||||
# Enabled postgres
|
||||
postgresql:
|
||||
enabled: true
|
||||
existingSecret: "dbcreds"
|
||||
postgresqlUsername: firefly
|
||||
postgresqlDatabase: firefly
|
||||
File diff suppressed because it is too large
Load Diff
@@ -1,54 +0,0 @@
|
||||
{{/* Define the cronjob */}}
|
||||
{{- define "fireflyiii.cronjob" -}}
|
||||
{{- $jobName := include "tc.common.names.fullname" . }}
|
||||
|
||||
---
|
||||
apiVersion: batch/v1
|
||||
kind: CronJob
|
||||
metadata:
|
||||
name: {{ printf "%s-cronjob" $jobName }}
|
||||
labels:
|
||||
{{- include "tc.common.labels" . | nindent 4 }}
|
||||
spec:
|
||||
schedule: "{{ .Values.cronjob.schedule }}"
|
||||
concurrencyPolicy: Forbid
|
||||
{{- with .Values.cronjob.failedJobsHistoryLimit }}
|
||||
failedJobsHistoryLimit: {{ . }}
|
||||
{{- end }}
|
||||
{{- with .Values.cronjob.successfulJobsHistoryLimit }}
|
||||
successfulJobsHistoryLimit: {{ . }}
|
||||
{{- end }}
|
||||
jobTemplate:
|
||||
metadata:
|
||||
spec:
|
||||
template:
|
||||
metadata:
|
||||
spec:
|
||||
securityContext:
|
||||
runAsUser: 568
|
||||
runAsGroup: 568
|
||||
restartPolicy: Never
|
||||
containers:
|
||||
- name: {{ .Chart.Name }}
|
||||
securityContext:
|
||||
privileged: false
|
||||
readOnlyRootFilesystem: true
|
||||
allowPrivilegeEscalation: false
|
||||
runAsNonRoot: true
|
||||
capabilities:
|
||||
drop:
|
||||
- ALL
|
||||
env:
|
||||
- name: STATIC_CRON_TOKEN
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: fireflyiii-secrets
|
||||
key: STATIC_CRON_TOKEN
|
||||
image: "{{ .Values.alpineImage.repository }}:{{ .Values.alpineImage.tag }}"
|
||||
args:
|
||||
- curl
|
||||
- "http://{{ $jobName }}.ix-{{ .Release.Name }}.svc.cluster.local:{{ .Values.service.main.ports.main.port }}/api/v1/cron/$(STATIC_CRON_TOKEN)"
|
||||
resources:
|
||||
{{ toYaml .Values.resources | indent 16 }}
|
||||
|
||||
{{- end -}}
|
||||
@@ -1,24 +0,0 @@
|
||||
{{/* Define the secrets */}}
|
||||
{{- define "fireflyiii.secrets" -}}
|
||||
---
|
||||
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
type: Opaque
|
||||
metadata:
|
||||
name: fireflyiii-secrets
|
||||
{{- $fireflyiiiprevious := lookup "v1" "Secret" .Release.Namespace "fireflyiii-secrets" }}
|
||||
{{- $static_cron_token := "" }}
|
||||
{{- $app_key := "" }}
|
||||
data:
|
||||
{{- if $fireflyiiiprevious}}
|
||||
STATIC_CRON_TOKEN: {{ index $fireflyiiiprevious.data "STATIC_CRON_TOKEN" }}
|
||||
APP_KEY: {{ index $fireflyiiiprevious.data "APP_KEY" }}
|
||||
{{- else }}
|
||||
{{- $static_cron_token := randAlphaNum 32 }}
|
||||
{{- $app_key := randAlphaNum 32 }}
|
||||
STATIC_CRON_TOKEN: {{ $static_cron_token | b64enc }}
|
||||
APP_KEY: {{ $app_key | b64enc }}
|
||||
{{- end }}
|
||||
|
||||
{{- end -}}
|
||||
Some files were not shown because too many files have changed in this diff Show More
Reference in New Issue
Block a user