truecharts/charts
1
0
Fork 0
mirror of https://github.com/truecharts/charts.git synced 2026-07-16 01:11:21 -03:00
Code Issues Packages Projects Releases Wiki Activity

fix(authelia): prevent encryption key resets

Browse Source
This commit is contained in:
Kjeld Schouten-Lebbing
2023-03-07 21:23:23 +01:00
parent b2b426eab5
commit 629f487dbf
2 changed files with 8 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
charts/enterprise/authelia/Chart.yaml
View File

@@ -3,11 +3,11 @@ appVersion: "4.37.5"
dependencies:
- name: common
repository: https://library-charts.truecharts.org
version: 12.2.20
version: 12.2.24
- condition: redis.enabled
name: redis
repository: https://deps.truecharts.org
version: 6.0.11
version: 6.0.14
deprecated: false
description: Authelia is a Single Sign-On Multi-Factor portal for web apps
home: https://truecharts.org/charts/enterprise/authelia
@@ -36,7 +36,7 @@ sources:
- https://github.com/authelia/chartrepo
- https://github.com/authelia/authelia
type: application
version: 15.0.5
version: 15.0.7
annotations:
truecharts.org/catagories: |
- security

15
charts/enterprise/authelia/templates/_secrets.tpl
View File

@@ -9,14 +9,9 @@
enabled: true
data:
{{- if $autheliaprevious }}
SESSION_ENCRYPTION_KEY: {{ index $autheliaprevious.data "SESSION_ENCRYPTION_KEY" }}
JWT_TOKEN: {{ index $autheliaprevious.data "JWT_TOKEN" }}
{{- if ( hasKey $autheliaprevious.data "ENCRYPTION_KEY" ) }}
ENCRYPTION_KEY: {{ index $autheliaprevious.data "ENCRYPTION_KEY" }}
{{- else }}
{{- $encryptionkey := randAlphaNum 100 }}
ENCRYPTION_KEY: {{ $encryptionkey }}
{{- end }}
SESSION_ENCRYPTION_KEY: {{ index $autheliaprevious.data "SESSION_ENCRYPTION_KEY" | b64dec }}
JWT_TOKEN: {{ index $autheliaprevious.data "JWT_TOKEN" | b64dec }}
ENCRYPTION_KEY: {{ index $autheliaprevious.data "ENCRYPTION_KEY" | b64dec }}
{{- else }}
{{- $jwtsecret := randAlphaNum 50 }}
{{- $sessionsecret := randAlphaNum 50 }}
@@ -47,8 +42,8 @@ data:
{{- if $autheliaprevious }}
{{- if and ( hasKey $autheliaprevious.data "OIDC_PRIVATE_KEY" ) ( hasKey $autheliaprevious.data "OIDC_HMAC_SECRET" ) }}
OIDC_PRIVATE_KEY: {{ index $autheliaprevious.data "OIDC_PRIVATE_KEY" }}
OIDC_HMAC_SECRET: {{ index $autheliaprevious.data "OIDC_HMAC_SECRET" }}
OIDC_PRIVATE_KEY: {{ index $autheliaprevious.data "OIDC_PRIVATE_KEY" | b64dec }}
OIDC_HMAC_SECRET: {{ index $autheliaprevious.data "OIDC_HMAC_SECRET" | b64dec }}
{{- else }}
{{- $oidckey := genPrivateKey "rsa" }}
{{- $oidcsecret := randAlphaNum 32 }}