mirror of
https://github.com/authelia/authelia.git
synced 2026-10-28 17:44:56 +08:00
The registration dialog hardcoded the Google Authenticator store listings in `web/src/constants/constants.ts`, so an operator who standardises on a different authenticator application had no way to point users at it and the dialog kept advertising an application they did not want used. This adds `totp.apps.apple_store` and `totp.apps.google_play`, each with a `url` and a `disable` option. Every `url` is optional and defaults to the Google Authenticator listing for that store, so a deployment which configures nothing behaves exactly as it did before, and each configured value must be an absolute `https` URL. The values reach the frontend through the embedded `data-totpapp*` attributes rather than an API call, as they are static for the lifetime of the process, which is the same route already used by `resetpasswordcustomurl`. A store which sets `disable` sends an empty link to the frontend and its badge is not rendered, which also means a disabled store's `url` is neither defaulted nor validated. Disabling every store removes the prompt above the badges as well, so an operator who does not want to suggest an application at all can turn the whole section off without the prompt being left behind pointing at nothing. The prompt above the badges was `Need Google Authenticator?`, which would be wrong for any other configured application, so it is now `Need an authenticator app?`. The store badges themselves are unchanged: they identify the store rather than the application, so they remain correct whichever listing the link points at. This does not add an F-Droid badge. That needs a third store badge shipped as a trademarked asset with its own `REUSE.toml` annotation, which is a licensing decision rather than a code one, and the issue itself raises it as possibly separate. Closes #1981 --------- Signed-off-by: Amir Zarrinkafsh <3339418+nightah@users.noreply.github.com> Signed-off-by: James Elliott <james-d-elliott@users.noreply.github.com> Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
1413 lines
39 KiB
JSON
1413 lines
39 KiB
JSON
[
|
|
{
|
|
"path": "access_control.default_policy",
|
|
"secret": false,
|
|
"env": "AUTHELIA_ACCESS_CONTROL_DEFAULT_POLICY"
|
|
},
|
|
{
|
|
"path": "authentication_backend.file.password.algorithm",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ALGORITHM"
|
|
},
|
|
{
|
|
"path": "authentication_backend.file.password.argon2.iterations",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_ITERATIONS"
|
|
},
|
|
{
|
|
"path": "authentication_backend.file.password.argon2.key_length",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_KEY_LENGTH"
|
|
},
|
|
{
|
|
"path": "authentication_backend.file.password.argon2.memory",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_MEMORY"
|
|
},
|
|
{
|
|
"path": "authentication_backend.file.password.argon2.parallelism",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_PARALLELISM"
|
|
},
|
|
{
|
|
"path": "authentication_backend.file.password.argon2.salt_length",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_SALT_LENGTH"
|
|
},
|
|
{
|
|
"path": "authentication_backend.file.password.argon2.variant",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_VARIANT"
|
|
},
|
|
{
|
|
"path": "authentication_backend.file.password.bcrypt.cost",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_BCRYPT_COST"
|
|
},
|
|
{
|
|
"path": "authentication_backend.file.password.bcrypt.variant",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_BCRYPT_VARIANT"
|
|
},
|
|
{
|
|
"path": "authentication_backend.file.password.pbkdf2.iterations",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PBKDF2_ITERATIONS"
|
|
},
|
|
{
|
|
"path": "authentication_backend.file.password.pbkdf2.salt_length",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PBKDF2_SALT_LENGTH"
|
|
},
|
|
{
|
|
"path": "authentication_backend.file.password.pbkdf2.variant",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PBKDF2_VARIANT"
|
|
},
|
|
{
|
|
"path": "authentication_backend.file.password.scrypt.block_size",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_BLOCK_SIZE"
|
|
},
|
|
{
|
|
"path": "authentication_backend.file.password.scrypt.iterations",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_ITERATIONS"
|
|
},
|
|
{
|
|
"path": "authentication_backend.file.password.scrypt.key_length",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_KEY_LENGTH"
|
|
},
|
|
{
|
|
"path": "authentication_backend.file.password.scrypt.parallelism",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_PARALLELISM"
|
|
},
|
|
{
|
|
"path": "authentication_backend.file.password.scrypt.salt_length",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_SALT_LENGTH"
|
|
},
|
|
{
|
|
"path": "authentication_backend.file.password.scrypt.variant",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_VARIANT"
|
|
},
|
|
{
|
|
"path": "authentication_backend.file.password.sha2crypt.iterations",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SHA2CRYPT_ITERATIONS"
|
|
},
|
|
{
|
|
"path": "authentication_backend.file.password.sha2crypt.salt_length",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SHA2CRYPT_SALT_LENGTH"
|
|
},
|
|
{
|
|
"path": "authentication_backend.file.password.sha2crypt.variant",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SHA2CRYPT_VARIANT"
|
|
},
|
|
{
|
|
"path": "authentication_backend.file.path",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_FILE_PATH"
|
|
},
|
|
{
|
|
"path": "authentication_backend.file.search.case_insensitive",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_FILE_SEARCH_CASE_INSENSITIVE"
|
|
},
|
|
{
|
|
"path": "authentication_backend.file.search.email",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_FILE_SEARCH_EMAIL"
|
|
},
|
|
{
|
|
"path": "authentication_backend.file.watch",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_FILE_WATCH"
|
|
},
|
|
{
|
|
"path": "authentication_backend.ldap.additional_groups_dn",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_GROUPS_DN"
|
|
},
|
|
{
|
|
"path": "authentication_backend.ldap.additional_users_dn",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_USERS_DN"
|
|
},
|
|
{
|
|
"path": "authentication_backend.ldap.address",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDRESS"
|
|
},
|
|
{
|
|
"path": "authentication_backend.ldap.attributes.birthdate",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_BIRTHDATE"
|
|
},
|
|
{
|
|
"path": "authentication_backend.ldap.attributes.country",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_COUNTRY"
|
|
},
|
|
{
|
|
"path": "authentication_backend.ldap.attributes.display_name",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_DISPLAY_NAME"
|
|
},
|
|
{
|
|
"path": "authentication_backend.ldap.attributes.distinguished_name",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_DISTINGUISHED_NAME"
|
|
},
|
|
{
|
|
"path": "authentication_backend.ldap.attributes.family_name",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_FAMILY_NAME"
|
|
},
|
|
{
|
|
"path": "authentication_backend.ldap.attributes.gender",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_GENDER"
|
|
},
|
|
{
|
|
"path": "authentication_backend.ldap.attributes.given_name",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_GIVEN_NAME"
|
|
},
|
|
{
|
|
"path": "authentication_backend.ldap.attributes.group_name",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_GROUP_NAME"
|
|
},
|
|
{
|
|
"path": "authentication_backend.ldap.attributes.locale",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_LOCALE"
|
|
},
|
|
{
|
|
"path": "authentication_backend.ldap.attributes.locality",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_LOCALITY"
|
|
},
|
|
{
|
|
"path": "authentication_backend.ldap.attributes.mail",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_MAIL"
|
|
},
|
|
{
|
|
"path": "authentication_backend.ldap.attributes.member_of",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_MEMBER_OF"
|
|
},
|
|
{
|
|
"path": "authentication_backend.ldap.attributes.middle_name",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_MIDDLE_NAME"
|
|
},
|
|
{
|
|
"path": "authentication_backend.ldap.attributes.nickname",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_NICKNAME"
|
|
},
|
|
{
|
|
"path": "authentication_backend.ldap.attributes.phone_extension",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_PHONE_EXTENSION"
|
|
},
|
|
{
|
|
"path": "authentication_backend.ldap.attributes.phone_number",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_PHONE_NUMBER"
|
|
},
|
|
{
|
|
"path": "authentication_backend.ldap.attributes.picture",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_PICTURE"
|
|
},
|
|
{
|
|
"path": "authentication_backend.ldap.attributes.postal_code",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_POSTAL_CODE"
|
|
},
|
|
{
|
|
"path": "authentication_backend.ldap.attributes.profile",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_PROFILE"
|
|
},
|
|
{
|
|
"path": "authentication_backend.ldap.attributes.region",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_REGION"
|
|
},
|
|
{
|
|
"path": "authentication_backend.ldap.attributes.street_address",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_STREET_ADDRESS"
|
|
},
|
|
{
|
|
"path": "authentication_backend.ldap.attributes.username",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_USERNAME"
|
|
},
|
|
{
|
|
"path": "authentication_backend.ldap.attributes.website",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_WEBSITE"
|
|
},
|
|
{
|
|
"path": "authentication_backend.ldap.attributes.zoneinfo",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_ZONEINFO"
|
|
},
|
|
{
|
|
"path": "authentication_backend.ldap.base_dn",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_LDAP_BASE_DN"
|
|
},
|
|
{
|
|
"path": "authentication_backend.ldap.group_search_mode",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUP_SEARCH_MODE"
|
|
},
|
|
{
|
|
"path": "authentication_backend.ldap.groups_filter",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUPS_FILTER"
|
|
},
|
|
{
|
|
"path": "authentication_backend.ldap.implementation",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_LDAP_IMPLEMENTATION"
|
|
},
|
|
{
|
|
"path": "authentication_backend.ldap.password",
|
|
"secret": true,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PASSWORD_FILE"
|
|
},
|
|
{
|
|
"path": "authentication_backend.ldap.permit_referrals",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_REFERRALS"
|
|
},
|
|
{
|
|
"path": "authentication_backend.ldap.permit_unauthenticated_bind",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_UNAUTHENTICATED_BIND"
|
|
},
|
|
{
|
|
"path": "authentication_backend.ldap.pooling.count",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_LDAP_POOLING_COUNT"
|
|
},
|
|
{
|
|
"path": "authentication_backend.ldap.pooling.enable",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_LDAP_POOLING_ENABLE"
|
|
},
|
|
{
|
|
"path": "authentication_backend.ldap.pooling.retries",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_LDAP_POOLING_RETRIES"
|
|
},
|
|
{
|
|
"path": "authentication_backend.ldap.pooling.timeout",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_LDAP_POOLING_TIMEOUT"
|
|
},
|
|
{
|
|
"path": "authentication_backend.ldap.start_tls",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_LDAP_START_TLS"
|
|
},
|
|
{
|
|
"path": "authentication_backend.ldap.timeout",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TIMEOUT"
|
|
},
|
|
{
|
|
"path": "authentication_backend.ldap.tls.certificate_chain",
|
|
"secret": true,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_CERTIFICATE_CHAIN_FILE"
|
|
},
|
|
{
|
|
"path": "authentication_backend.ldap.tls.maximum_version",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_MAXIMUM_VERSION"
|
|
},
|
|
{
|
|
"path": "authentication_backend.ldap.tls.minimum_version",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_MINIMUM_VERSION"
|
|
},
|
|
{
|
|
"path": "authentication_backend.ldap.tls.private_key",
|
|
"secret": true,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_PRIVATE_KEY_FILE"
|
|
},
|
|
{
|
|
"path": "authentication_backend.ldap.tls.server_name",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_SERVER_NAME"
|
|
},
|
|
{
|
|
"path": "authentication_backend.ldap.tls.skip_verify",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_SKIP_VERIFY"
|
|
},
|
|
{
|
|
"path": "authentication_backend.ldap.user",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USER"
|
|
},
|
|
{
|
|
"path": "authentication_backend.ldap.users_filter",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERS_FILTER"
|
|
},
|
|
{
|
|
"path": "authentication_backend.password_change.disable",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_PASSWORD_CHANGE_DISABLE"
|
|
},
|
|
{
|
|
"path": "authentication_backend.password_reset.custom_url",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_PASSWORD_RESET_CUSTOM_URL"
|
|
},
|
|
{
|
|
"path": "authentication_backend.password_reset.disable",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_PASSWORD_RESET_DISABLE"
|
|
},
|
|
{
|
|
"path": "authentication_backend.refresh_interval",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_REFRESH_INTERVAL"
|
|
},
|
|
{
|
|
"path": "authentication_backend.registration.custom_url",
|
|
"secret": false,
|
|
"env": "AUTHELIA_AUTHENTICATION_BACKEND_REGISTRATION_CUSTOM_URL"
|
|
},
|
|
{
|
|
"path": "certificates_directory",
|
|
"secret": false,
|
|
"env": "AUTHELIA_CERTIFICATES_DIRECTORY"
|
|
},
|
|
{
|
|
"path": "default_2fa_method",
|
|
"secret": false,
|
|
"env": "AUTHELIA_DEFAULT_2FA_METHOD"
|
|
},
|
|
{
|
|
"path": "duo_api.disable",
|
|
"secret": false,
|
|
"env": "AUTHELIA_DUO_API_DISABLE"
|
|
},
|
|
{
|
|
"path": "duo_api.enable_self_enrollment",
|
|
"secret": false,
|
|
"env": "AUTHELIA_DUO_API_ENABLE_SELF_ENROLLMENT"
|
|
},
|
|
{
|
|
"path": "duo_api.hostname",
|
|
"secret": false,
|
|
"env": "AUTHELIA_DUO_API_HOSTNAME"
|
|
},
|
|
{
|
|
"path": "duo_api.integration_key",
|
|
"secret": true,
|
|
"env": "AUTHELIA_DUO_API_INTEGRATION_KEY_FILE"
|
|
},
|
|
{
|
|
"path": "duo_api.secret_key",
|
|
"secret": true,
|
|
"env": "AUTHELIA_DUO_API_SECRET_KEY_FILE"
|
|
},
|
|
{
|
|
"path": "identity_providers.oidc",
|
|
"secret": false,
|
|
"env": "AUTHELIA_IDENTITY_PROVIDERS_OIDC"
|
|
},
|
|
{
|
|
"path": "identity_providers.oidc.cors.allowed_origins_from_client_redirect_uris",
|
|
"secret": false,
|
|
"env": "AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ALLOWED_ORIGINS_FROM_CLIENT_REDIRECT_URIS"
|
|
},
|
|
{
|
|
"path": "identity_providers.oidc.cors.endpoints",
|
|
"secret": false,
|
|
"env": "AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ENDPOINTS"
|
|
},
|
|
{
|
|
"path": "identity_providers.oidc.discovery_signed_response_alg",
|
|
"secret": false,
|
|
"env": "AUTHELIA_IDENTITY_PROVIDERS_OIDC_DISCOVERY_SIGNED_RESPONSE_ALG"
|
|
},
|
|
{
|
|
"path": "identity_providers.oidc.discovery_signed_response_key_id",
|
|
"secret": false,
|
|
"env": "AUTHELIA_IDENTITY_PROVIDERS_OIDC_DISCOVERY_SIGNED_RESPONSE_KEY_ID"
|
|
},
|
|
{
|
|
"path": "identity_providers.oidc.enable_client_debug_messages",
|
|
"secret": false,
|
|
"env": "AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENABLE_CLIENT_DEBUG_MESSAGES"
|
|
},
|
|
{
|
|
"path": "identity_providers.oidc.enable_jwt_access_token_stateless_introspection",
|
|
"secret": false,
|
|
"env": "AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENABLE_JWT_ACCESS_TOKEN_STATELESS_INTROSPECTION"
|
|
},
|
|
{
|
|
"path": "identity_providers.oidc.enable_pkce_plain_challenge",
|
|
"secret": false,
|
|
"env": "AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENABLE_PKCE_PLAIN_CHALLENGE"
|
|
},
|
|
{
|
|
"path": "identity_providers.oidc.enforce_pkce",
|
|
"secret": false,
|
|
"env": "AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENFORCE_PKCE"
|
|
},
|
|
{
|
|
"path": "identity_providers.oidc.hmac_secret",
|
|
"secret": true,
|
|
"env": "AUTHELIA_IDENTITY_PROVIDERS_OIDC_HMAC_SECRET_FILE"
|
|
},
|
|
{
|
|
"path": "identity_providers.oidc.lifespans.access_token",
|
|
"secret": false,
|
|
"env": "AUTHELIA_IDENTITY_PROVIDERS_OIDC_LIFESPANS_ACCESS_TOKEN"
|
|
},
|
|
{
|
|
"path": "identity_providers.oidc.lifespans.authorize_code",
|
|
"secret": false,
|
|
"env": "AUTHELIA_IDENTITY_PROVIDERS_OIDC_LIFESPANS_AUTHORIZE_CODE"
|
|
},
|
|
{
|
|
"path": "identity_providers.oidc.lifespans.device_code",
|
|
"secret": false,
|
|
"env": "AUTHELIA_IDENTITY_PROVIDERS_OIDC_LIFESPANS_DEVICE_CODE"
|
|
},
|
|
{
|
|
"path": "identity_providers.oidc.lifespans.id_token",
|
|
"secret": false,
|
|
"env": "AUTHELIA_IDENTITY_PROVIDERS_OIDC_LIFESPANS_ID_TOKEN"
|
|
},
|
|
{
|
|
"path": "identity_providers.oidc.lifespans.jwt_secured_authorization",
|
|
"secret": false,
|
|
"env": "AUTHELIA_IDENTITY_PROVIDERS_OIDC_LIFESPANS_JWT_SECURED_AUTHORIZATION"
|
|
},
|
|
{
|
|
"path": "identity_providers.oidc.lifespans.refresh_token",
|
|
"secret": false,
|
|
"env": "AUTHELIA_IDENTITY_PROVIDERS_OIDC_LIFESPANS_REFRESH_TOKEN"
|
|
},
|
|
{
|
|
"path": "identity_providers.oidc.minimum_parameter_entropy",
|
|
"secret": false,
|
|
"env": "AUTHELIA_IDENTITY_PROVIDERS_OIDC_MINIMUM_PARAMETER_ENTROPY"
|
|
},
|
|
{
|
|
"path": "identity_providers.oidc.require_pushed_authorization_requests",
|
|
"secret": false,
|
|
"env": "AUTHELIA_IDENTITY_PROVIDERS_OIDC_REQUIRE_PUSHED_AUTHORIZATION_REQUESTS"
|
|
},
|
|
{
|
|
"path": "identity_validation.elevated_session.characters",
|
|
"secret": false,
|
|
"env": "AUTHELIA_IDENTITY_VALIDATION_ELEVATED_SESSION_CHARACTERS"
|
|
},
|
|
{
|
|
"path": "identity_validation.elevated_session.code_lifespan",
|
|
"secret": false,
|
|
"env": "AUTHELIA_IDENTITY_VALIDATION_ELEVATED_SESSION_CODE_LIFESPAN"
|
|
},
|
|
{
|
|
"path": "identity_validation.elevated_session.elevation_lifespan",
|
|
"secret": false,
|
|
"env": "AUTHELIA_IDENTITY_VALIDATION_ELEVATED_SESSION_ELEVATION_LIFESPAN"
|
|
},
|
|
{
|
|
"path": "identity_validation.elevated_session.require_second_factor",
|
|
"secret": false,
|
|
"env": "AUTHELIA_IDENTITY_VALIDATION_ELEVATED_SESSION_REQUIRE_SECOND_FACTOR"
|
|
},
|
|
{
|
|
"path": "identity_validation.elevated_session.skip_second_factor",
|
|
"secret": false,
|
|
"env": "AUTHELIA_IDENTITY_VALIDATION_ELEVATED_SESSION_SKIP_SECOND_FACTOR"
|
|
},
|
|
{
|
|
"path": "identity_validation.reset_password.jwt_algorithm",
|
|
"secret": false,
|
|
"env": "AUTHELIA_IDENTITY_VALIDATION_RESET_PASSWORD_JWT_ALGORITHM"
|
|
},
|
|
{
|
|
"path": "identity_validation.reset_password.jwt_lifespan",
|
|
"secret": false,
|
|
"env": "AUTHELIA_IDENTITY_VALIDATION_RESET_PASSWORD_JWT_LIFESPAN"
|
|
},
|
|
{
|
|
"path": "identity_validation.reset_password.jwt_secret",
|
|
"secret": true,
|
|
"env": "AUTHELIA_IDENTITY_VALIDATION_RESET_PASSWORD_JWT_SECRET_FILE"
|
|
},
|
|
{
|
|
"path": "log.file_path",
|
|
"secret": false,
|
|
"env": "AUTHELIA_LOG_FILE_PATH"
|
|
},
|
|
{
|
|
"path": "log.format",
|
|
"secret": false,
|
|
"env": "AUTHELIA_LOG_FORMAT"
|
|
},
|
|
{
|
|
"path": "log.keep_stdout",
|
|
"secret": false,
|
|
"env": "AUTHELIA_LOG_KEEP_STDOUT"
|
|
},
|
|
{
|
|
"path": "log.level",
|
|
"secret": false,
|
|
"env": "AUTHELIA_LOG_LEVEL"
|
|
},
|
|
{
|
|
"path": "notifier.disable_startup_check",
|
|
"secret": false,
|
|
"env": "AUTHELIA_NOTIFIER_DISABLE_STARTUP_CHECK"
|
|
},
|
|
{
|
|
"path": "notifier.filesystem.filename",
|
|
"secret": false,
|
|
"env": "AUTHELIA_NOTIFIER_FILESYSTEM_FILENAME"
|
|
},
|
|
{
|
|
"path": "notifier.smtp.address",
|
|
"secret": false,
|
|
"env": "AUTHELIA_NOTIFIER_SMTP_ADDRESS"
|
|
},
|
|
{
|
|
"path": "notifier.smtp.disable_html_emails",
|
|
"secret": false,
|
|
"env": "AUTHELIA_NOTIFIER_SMTP_DISABLE_HTML_EMAILS"
|
|
},
|
|
{
|
|
"path": "notifier.smtp.disable_require_tls",
|
|
"secret": false,
|
|
"env": "AUTHELIA_NOTIFIER_SMTP_DISABLE_REQUIRE_TLS"
|
|
},
|
|
{
|
|
"path": "notifier.smtp.disable_starttls",
|
|
"secret": false,
|
|
"env": "AUTHELIA_NOTIFIER_SMTP_DISABLE_STARTTLS"
|
|
},
|
|
{
|
|
"path": "notifier.smtp.identifier",
|
|
"secret": false,
|
|
"env": "AUTHELIA_NOTIFIER_SMTP_IDENTIFIER"
|
|
},
|
|
{
|
|
"path": "notifier.smtp.password",
|
|
"secret": true,
|
|
"env": "AUTHELIA_NOTIFIER_SMTP_PASSWORD_FILE"
|
|
},
|
|
{
|
|
"path": "notifier.smtp.sender",
|
|
"secret": false,
|
|
"env": "AUTHELIA_NOTIFIER_SMTP_SENDER"
|
|
},
|
|
{
|
|
"path": "notifier.smtp.startup_check_address",
|
|
"secret": false,
|
|
"env": "AUTHELIA_NOTIFIER_SMTP_STARTUP_CHECK_ADDRESS"
|
|
},
|
|
{
|
|
"path": "notifier.smtp.subject",
|
|
"secret": false,
|
|
"env": "AUTHELIA_NOTIFIER_SMTP_SUBJECT"
|
|
},
|
|
{
|
|
"path": "notifier.smtp.timeout",
|
|
"secret": false,
|
|
"env": "AUTHELIA_NOTIFIER_SMTP_TIMEOUT"
|
|
},
|
|
{
|
|
"path": "notifier.smtp.tls.certificate_chain",
|
|
"secret": true,
|
|
"env": "AUTHELIA_NOTIFIER_SMTP_TLS_CERTIFICATE_CHAIN_FILE"
|
|
},
|
|
{
|
|
"path": "notifier.smtp.tls.maximum_version",
|
|
"secret": false,
|
|
"env": "AUTHELIA_NOTIFIER_SMTP_TLS_MAXIMUM_VERSION"
|
|
},
|
|
{
|
|
"path": "notifier.smtp.tls.minimum_version",
|
|
"secret": false,
|
|
"env": "AUTHELIA_NOTIFIER_SMTP_TLS_MINIMUM_VERSION"
|
|
},
|
|
{
|
|
"path": "notifier.smtp.tls.private_key",
|
|
"secret": true,
|
|
"env": "AUTHELIA_NOTIFIER_SMTP_TLS_PRIVATE_KEY_FILE"
|
|
},
|
|
{
|
|
"path": "notifier.smtp.tls.server_name",
|
|
"secret": false,
|
|
"env": "AUTHELIA_NOTIFIER_SMTP_TLS_SERVER_NAME"
|
|
},
|
|
{
|
|
"path": "notifier.smtp.tls.skip_verify",
|
|
"secret": false,
|
|
"env": "AUTHELIA_NOTIFIER_SMTP_TLS_SKIP_VERIFY"
|
|
},
|
|
{
|
|
"path": "notifier.smtp.username",
|
|
"secret": false,
|
|
"env": "AUTHELIA_NOTIFIER_SMTP_USERNAME"
|
|
},
|
|
{
|
|
"path": "notifier.template_path",
|
|
"secret": false,
|
|
"env": "AUTHELIA_NOTIFIER_TEMPLATE_PATH"
|
|
},
|
|
{
|
|
"path": "ntp.address",
|
|
"secret": false,
|
|
"env": "AUTHELIA_NTP_ADDRESS"
|
|
},
|
|
{
|
|
"path": "ntp.disable_failure",
|
|
"secret": false,
|
|
"env": "AUTHELIA_NTP_DISABLE_FAILURE"
|
|
},
|
|
{
|
|
"path": "ntp.disable_startup_check",
|
|
"secret": false,
|
|
"env": "AUTHELIA_NTP_DISABLE_STARTUP_CHECK"
|
|
},
|
|
{
|
|
"path": "ntp.max_desync",
|
|
"secret": false,
|
|
"env": "AUTHELIA_NTP_MAX_DESYNC"
|
|
},
|
|
{
|
|
"path": "ntp.version",
|
|
"secret": false,
|
|
"env": "AUTHELIA_NTP_VERSION"
|
|
},
|
|
{
|
|
"path": "password_policy.standard.enabled",
|
|
"secret": false,
|
|
"env": "AUTHELIA_PASSWORD_POLICY_STANDARD_ENABLED"
|
|
},
|
|
{
|
|
"path": "password_policy.standard.max_length",
|
|
"secret": false,
|
|
"env": "AUTHELIA_PASSWORD_POLICY_STANDARD_MAX_LENGTH"
|
|
},
|
|
{
|
|
"path": "password_policy.standard.min_length",
|
|
"secret": false,
|
|
"env": "AUTHELIA_PASSWORD_POLICY_STANDARD_MIN_LENGTH"
|
|
},
|
|
{
|
|
"path": "password_policy.standard.require_lowercase",
|
|
"secret": false,
|
|
"env": "AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_LOWERCASE"
|
|
},
|
|
{
|
|
"path": "password_policy.standard.require_number",
|
|
"secret": false,
|
|
"env": "AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_NUMBER"
|
|
},
|
|
{
|
|
"path": "password_policy.standard.require_special",
|
|
"secret": false,
|
|
"env": "AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_SPECIAL"
|
|
},
|
|
{
|
|
"path": "password_policy.standard.require_uppercase",
|
|
"secret": false,
|
|
"env": "AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_UPPERCASE"
|
|
},
|
|
{
|
|
"path": "password_policy.zxcvbn.enabled",
|
|
"secret": false,
|
|
"env": "AUTHELIA_PASSWORD_POLICY_ZXCVBN_ENABLED"
|
|
},
|
|
{
|
|
"path": "password_policy.zxcvbn.min_score",
|
|
"secret": false,
|
|
"env": "AUTHELIA_PASSWORD_POLICY_ZXCVBN_MIN_SCORE"
|
|
},
|
|
{
|
|
"path": "privacy_policy.enabled",
|
|
"secret": false,
|
|
"env": "AUTHELIA_PRIVACY_POLICY_ENABLED"
|
|
},
|
|
{
|
|
"path": "privacy_policy.policy_url",
|
|
"secret": false,
|
|
"env": "AUTHELIA_PRIVACY_POLICY_POLICY_URL"
|
|
},
|
|
{
|
|
"path": "privacy_policy.require_user_acceptance",
|
|
"secret": false,
|
|
"env": "AUTHELIA_PRIVACY_POLICY_REQUIRE_USER_ACCEPTANCE"
|
|
},
|
|
{
|
|
"path": "regulation.ban_time",
|
|
"secret": false,
|
|
"env": "AUTHELIA_REGULATION_BAN_TIME"
|
|
},
|
|
{
|
|
"path": "regulation.find_time",
|
|
"secret": false,
|
|
"env": "AUTHELIA_REGULATION_FIND_TIME"
|
|
},
|
|
{
|
|
"path": "regulation.max_retries",
|
|
"secret": false,
|
|
"env": "AUTHELIA_REGULATION_MAX_RETRIES"
|
|
},
|
|
{
|
|
"path": "regulation.modes",
|
|
"secret": false,
|
|
"env": "AUTHELIA_REGULATION_MODES"
|
|
},
|
|
{
|
|
"path": "server.address",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SERVER_ADDRESS"
|
|
},
|
|
{
|
|
"path": "server.asset_path",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SERVER_ASSET_PATH"
|
|
},
|
|
{
|
|
"path": "server.buffers.read",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SERVER_BUFFERS_READ"
|
|
},
|
|
{
|
|
"path": "server.buffers.write",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SERVER_BUFFERS_WRITE"
|
|
},
|
|
{
|
|
"path": "server.disable_healthcheck",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SERVER_DISABLE_HEALTHCHECK"
|
|
},
|
|
{
|
|
"path": "server.endpoints.enable_expvars",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SERVER_ENDPOINTS_ENABLE_EXPVARS"
|
|
},
|
|
{
|
|
"path": "server.endpoints.enable_pprof",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SERVER_ENDPOINTS_ENABLE_PPROF"
|
|
},
|
|
{
|
|
"path": "server.endpoints.health.cache",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SERVER_ENDPOINTS_HEALTH_CACHE"
|
|
},
|
|
{
|
|
"path": "server.endpoints.health.detailed",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SERVER_ENDPOINTS_HEALTH_DETAILED"
|
|
},
|
|
{
|
|
"path": "server.endpoints.health.providers",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SERVER_ENDPOINTS_HEALTH_PROVIDERS"
|
|
},
|
|
{
|
|
"path": "server.endpoints.health.verbose",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SERVER_ENDPOINTS_HEALTH_VERBOSE"
|
|
},
|
|
{
|
|
"path": "server.endpoints.rate_limits.health.enable",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SERVER_ENDPOINTS_RATE_LIMITS_HEALTH_ENABLE"
|
|
},
|
|
{
|
|
"path": "server.endpoints.rate_limits.openid_connect_introspection.enable",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SERVER_ENDPOINTS_RATE_LIMITS_OPENID_CONNECT_INTROSPECTION_ENABLE"
|
|
},
|
|
{
|
|
"path": "server.endpoints.rate_limits.openid_connect_pushed_authorization_request.enable",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SERVER_ENDPOINTS_RATE_LIMITS_OPENID_CONNECT_PUSHED_AUTHORIZATION_REQUEST_ENABLE"
|
|
},
|
|
{
|
|
"path": "server.endpoints.rate_limits.openid_connect_revocation.enable",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SERVER_ENDPOINTS_RATE_LIMITS_OPENID_CONNECT_REVOCATION_ENABLE"
|
|
},
|
|
{
|
|
"path": "server.endpoints.rate_limits.openid_connect_token.enable",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SERVER_ENDPOINTS_RATE_LIMITS_OPENID_CONNECT_TOKEN_ENABLE"
|
|
},
|
|
{
|
|
"path": "server.endpoints.rate_limits.openid_connect_userinfo.enable",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SERVER_ENDPOINTS_RATE_LIMITS_OPENID_CONNECT_USERINFO_ENABLE"
|
|
},
|
|
{
|
|
"path": "server.endpoints.rate_limits.reset_password_finish.enable",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SERVER_ENDPOINTS_RATE_LIMITS_RESET_PASSWORD_FINISH_ENABLE"
|
|
},
|
|
{
|
|
"path": "server.endpoints.rate_limits.reset_password_start.enable",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SERVER_ENDPOINTS_RATE_LIMITS_RESET_PASSWORD_START_ENABLE"
|
|
},
|
|
{
|
|
"path": "server.endpoints.rate_limits.second_factor_duo.enable",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SERVER_ENDPOINTS_RATE_LIMITS_SECOND_FACTOR_DUO_ENABLE"
|
|
},
|
|
{
|
|
"path": "server.endpoints.rate_limits.second_factor_password.enable",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SERVER_ENDPOINTS_RATE_LIMITS_SECOND_FACTOR_PASSWORD_ENABLE"
|
|
},
|
|
{
|
|
"path": "server.endpoints.rate_limits.second_factor_totp.enable",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SERVER_ENDPOINTS_RATE_LIMITS_SECOND_FACTOR_TOTP_ENABLE"
|
|
},
|
|
{
|
|
"path": "server.endpoints.rate_limits.session_elevation_finish.enable",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SERVER_ENDPOINTS_RATE_LIMITS_SESSION_ELEVATION_FINISH_ENABLE"
|
|
},
|
|
{
|
|
"path": "server.endpoints.rate_limits.session_elevation_start.enable",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SERVER_ENDPOINTS_RATE_LIMITS_SESSION_ELEVATION_START_ENABLE"
|
|
},
|
|
{
|
|
"path": "server.headers.csp_template",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SERVER_HEADERS_CSP_TEMPLATE"
|
|
},
|
|
{
|
|
"path": "server.timeouts.idle",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SERVER_TIMEOUTS_IDLE"
|
|
},
|
|
{
|
|
"path": "server.timeouts.read",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SERVER_TIMEOUTS_READ"
|
|
},
|
|
{
|
|
"path": "server.timeouts.write",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SERVER_TIMEOUTS_WRITE"
|
|
},
|
|
{
|
|
"path": "server.tls.certificate",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SERVER_TLS_CERTIFICATE"
|
|
},
|
|
{
|
|
"path": "server.tls.client_certificates",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SERVER_TLS_CLIENT_CERTIFICATES"
|
|
},
|
|
{
|
|
"path": "server.tls.key",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SERVER_TLS_KEY"
|
|
},
|
|
{
|
|
"path": "session",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SESSION"
|
|
},
|
|
{
|
|
"path": "session.expiration",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SESSION_EXPIRATION"
|
|
},
|
|
{
|
|
"path": "session.inactivity",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SESSION_INACTIVITY"
|
|
},
|
|
{
|
|
"path": "session.name",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SESSION_NAME"
|
|
},
|
|
{
|
|
"path": "session.redis.database_index",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SESSION_REDIS_DATABASE_INDEX"
|
|
},
|
|
{
|
|
"path": "session.redis.high_availability.route_by_latency",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_ROUTE_BY_LATENCY"
|
|
},
|
|
{
|
|
"path": "session.redis.high_availability.route_randomly",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_ROUTE_RANDOMLY"
|
|
},
|
|
{
|
|
"path": "session.redis.high_availability.sentinel_name",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_NAME"
|
|
},
|
|
{
|
|
"path": "session.redis.high_availability.sentinel_password",
|
|
"secret": true,
|
|
"env": "AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_PASSWORD_FILE"
|
|
},
|
|
{
|
|
"path": "session.redis.high_availability.sentinel_username",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_USERNAME"
|
|
},
|
|
{
|
|
"path": "session.redis.host",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SESSION_REDIS_HOST"
|
|
},
|
|
{
|
|
"path": "session.redis.max_retries",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SESSION_REDIS_MAX_RETRIES"
|
|
},
|
|
{
|
|
"path": "session.redis.maximum_active_connections",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SESSION_REDIS_MAXIMUM_ACTIVE_CONNECTIONS"
|
|
},
|
|
{
|
|
"path": "session.redis.minimum_idle_connections",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SESSION_REDIS_MINIMUM_IDLE_CONNECTIONS"
|
|
},
|
|
{
|
|
"path": "session.redis.password",
|
|
"secret": true,
|
|
"env": "AUTHELIA_SESSION_REDIS_PASSWORD_FILE"
|
|
},
|
|
{
|
|
"path": "session.redis.port",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SESSION_REDIS_PORT"
|
|
},
|
|
{
|
|
"path": "session.redis.timeout",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SESSION_REDIS_TIMEOUT"
|
|
},
|
|
{
|
|
"path": "session.redis.tls.certificate_chain",
|
|
"secret": true,
|
|
"env": "AUTHELIA_SESSION_REDIS_TLS_CERTIFICATE_CHAIN_FILE"
|
|
},
|
|
{
|
|
"path": "session.redis.tls.maximum_version",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SESSION_REDIS_TLS_MAXIMUM_VERSION"
|
|
},
|
|
{
|
|
"path": "session.redis.tls.minimum_version",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SESSION_REDIS_TLS_MINIMUM_VERSION"
|
|
},
|
|
{
|
|
"path": "session.redis.tls.private_key",
|
|
"secret": true,
|
|
"env": "AUTHELIA_SESSION_REDIS_TLS_PRIVATE_KEY_FILE"
|
|
},
|
|
{
|
|
"path": "session.redis.tls.server_name",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SESSION_REDIS_TLS_SERVER_NAME"
|
|
},
|
|
{
|
|
"path": "session.redis.tls.skip_verify",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SESSION_REDIS_TLS_SKIP_VERIFY"
|
|
},
|
|
{
|
|
"path": "session.redis.username",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SESSION_REDIS_USERNAME"
|
|
},
|
|
{
|
|
"path": "session.remember_me",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SESSION_REMEMBER_ME"
|
|
},
|
|
{
|
|
"path": "session.same_site",
|
|
"secret": false,
|
|
"env": "AUTHELIA_SESSION_SAME_SITE"
|
|
},
|
|
{
|
|
"path": "session.secret",
|
|
"secret": true,
|
|
"env": "AUTHELIA_SESSION_SECRET_FILE"
|
|
},
|
|
{
|
|
"path": "storage.encryption_key",
|
|
"secret": true,
|
|
"env": "AUTHELIA_STORAGE_ENCRYPTION_KEY_FILE"
|
|
},
|
|
{
|
|
"path": "storage.local.path",
|
|
"secret": false,
|
|
"env": "AUTHELIA_STORAGE_LOCAL_PATH"
|
|
},
|
|
{
|
|
"path": "storage.mysql.address",
|
|
"secret": false,
|
|
"env": "AUTHELIA_STORAGE_MYSQL_ADDRESS"
|
|
},
|
|
{
|
|
"path": "storage.mysql.database",
|
|
"secret": false,
|
|
"env": "AUTHELIA_STORAGE_MYSQL_DATABASE"
|
|
},
|
|
{
|
|
"path": "storage.mysql.password",
|
|
"secret": true,
|
|
"env": "AUTHELIA_STORAGE_MYSQL_PASSWORD_FILE"
|
|
},
|
|
{
|
|
"path": "storage.mysql.timeout",
|
|
"secret": false,
|
|
"env": "AUTHELIA_STORAGE_MYSQL_TIMEOUT"
|
|
},
|
|
{
|
|
"path": "storage.mysql.tls.certificate_chain",
|
|
"secret": true,
|
|
"env": "AUTHELIA_STORAGE_MYSQL_TLS_CERTIFICATE_CHAIN_FILE"
|
|
},
|
|
{
|
|
"path": "storage.mysql.tls.maximum_version",
|
|
"secret": false,
|
|
"env": "AUTHELIA_STORAGE_MYSQL_TLS_MAXIMUM_VERSION"
|
|
},
|
|
{
|
|
"path": "storage.mysql.tls.minimum_version",
|
|
"secret": false,
|
|
"env": "AUTHELIA_STORAGE_MYSQL_TLS_MINIMUM_VERSION"
|
|
},
|
|
{
|
|
"path": "storage.mysql.tls.private_key",
|
|
"secret": true,
|
|
"env": "AUTHELIA_STORAGE_MYSQL_TLS_PRIVATE_KEY_FILE"
|
|
},
|
|
{
|
|
"path": "storage.mysql.tls.server_name",
|
|
"secret": false,
|
|
"env": "AUTHELIA_STORAGE_MYSQL_TLS_SERVER_NAME"
|
|
},
|
|
{
|
|
"path": "storage.mysql.tls.skip_verify",
|
|
"secret": false,
|
|
"env": "AUTHELIA_STORAGE_MYSQL_TLS_SKIP_VERIFY"
|
|
},
|
|
{
|
|
"path": "storage.mysql.username",
|
|
"secret": false,
|
|
"env": "AUTHELIA_STORAGE_MYSQL_USERNAME"
|
|
},
|
|
{
|
|
"path": "storage.postgres.address",
|
|
"secret": false,
|
|
"env": "AUTHELIA_STORAGE_POSTGRES_ADDRESS"
|
|
},
|
|
{
|
|
"path": "storage.postgres.database",
|
|
"secret": false,
|
|
"env": "AUTHELIA_STORAGE_POSTGRES_DATABASE"
|
|
},
|
|
{
|
|
"path": "storage.postgres.password",
|
|
"secret": true,
|
|
"env": "AUTHELIA_STORAGE_POSTGRES_PASSWORD_FILE"
|
|
},
|
|
{
|
|
"path": "storage.postgres.schema",
|
|
"secret": false,
|
|
"env": "AUTHELIA_STORAGE_POSTGRES_SCHEMA"
|
|
},
|
|
{
|
|
"path": "storage.postgres.timeout",
|
|
"secret": false,
|
|
"env": "AUTHELIA_STORAGE_POSTGRES_TIMEOUT"
|
|
},
|
|
{
|
|
"path": "storage.postgres.tls.certificate_chain",
|
|
"secret": true,
|
|
"env": "AUTHELIA_STORAGE_POSTGRES_TLS_CERTIFICATE_CHAIN_FILE"
|
|
},
|
|
{
|
|
"path": "storage.postgres.tls.maximum_version",
|
|
"secret": false,
|
|
"env": "AUTHELIA_STORAGE_POSTGRES_TLS_MAXIMUM_VERSION"
|
|
},
|
|
{
|
|
"path": "storage.postgres.tls.minimum_version",
|
|
"secret": false,
|
|
"env": "AUTHELIA_STORAGE_POSTGRES_TLS_MINIMUM_VERSION"
|
|
},
|
|
{
|
|
"path": "storage.postgres.tls.private_key",
|
|
"secret": true,
|
|
"env": "AUTHELIA_STORAGE_POSTGRES_TLS_PRIVATE_KEY_FILE"
|
|
},
|
|
{
|
|
"path": "storage.postgres.tls.server_name",
|
|
"secret": false,
|
|
"env": "AUTHELIA_STORAGE_POSTGRES_TLS_SERVER_NAME"
|
|
},
|
|
{
|
|
"path": "storage.postgres.tls.skip_verify",
|
|
"secret": false,
|
|
"env": "AUTHELIA_STORAGE_POSTGRES_TLS_SKIP_VERIFY"
|
|
},
|
|
{
|
|
"path": "storage.postgres.username",
|
|
"secret": false,
|
|
"env": "AUTHELIA_STORAGE_POSTGRES_USERNAME"
|
|
},
|
|
{
|
|
"path": "telemetry.metrics.address",
|
|
"secret": false,
|
|
"env": "AUTHELIA_TELEMETRY_METRICS_ADDRESS"
|
|
},
|
|
{
|
|
"path": "telemetry.metrics.buffers.read",
|
|
"secret": false,
|
|
"env": "AUTHELIA_TELEMETRY_METRICS_BUFFERS_READ"
|
|
},
|
|
{
|
|
"path": "telemetry.metrics.buffers.write",
|
|
"secret": false,
|
|
"env": "AUTHELIA_TELEMETRY_METRICS_BUFFERS_WRITE"
|
|
},
|
|
{
|
|
"path": "telemetry.metrics.enabled",
|
|
"secret": false,
|
|
"env": "AUTHELIA_TELEMETRY_METRICS_ENABLED"
|
|
},
|
|
{
|
|
"path": "telemetry.metrics.timeouts.idle",
|
|
"secret": false,
|
|
"env": "AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_IDLE"
|
|
},
|
|
{
|
|
"path": "telemetry.metrics.timeouts.read",
|
|
"secret": false,
|
|
"env": "AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_READ"
|
|
},
|
|
{
|
|
"path": "telemetry.metrics.timeouts.write",
|
|
"secret": false,
|
|
"env": "AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_WRITE"
|
|
},
|
|
{
|
|
"path": "theme",
|
|
"secret": false,
|
|
"env": "AUTHELIA_THEME"
|
|
},
|
|
{
|
|
"path": "totp.algorithm",
|
|
"secret": false,
|
|
"env": "AUTHELIA_TOTP_ALGORITHM"
|
|
},
|
|
{
|
|
"path": "totp.allowed_algorithms",
|
|
"secret": false,
|
|
"env": "AUTHELIA_TOTP_ALLOWED_ALGORITHMS"
|
|
},
|
|
{
|
|
"path": "totp.allowed_digits",
|
|
"secret": false,
|
|
"env": "AUTHELIA_TOTP_ALLOWED_DIGITS"
|
|
},
|
|
{
|
|
"path": "totp.allowed_periods",
|
|
"secret": false,
|
|
"env": "AUTHELIA_TOTP_ALLOWED_PERIODS"
|
|
},
|
|
{
|
|
"path": "totp.apps.apple_store.disable",
|
|
"secret": false,
|
|
"env": "AUTHELIA_TOTP_APPS_APPLE_STORE_DISABLE"
|
|
},
|
|
{
|
|
"path": "totp.apps.apple_store.url",
|
|
"secret": false,
|
|
"env": "AUTHELIA_TOTP_APPS_APPLE_STORE_URL"
|
|
},
|
|
{
|
|
"path": "totp.apps.google_play.disable",
|
|
"secret": false,
|
|
"env": "AUTHELIA_TOTP_APPS_GOOGLE_PLAY_DISABLE"
|
|
},
|
|
{
|
|
"path": "totp.apps.google_play.url",
|
|
"secret": false,
|
|
"env": "AUTHELIA_TOTP_APPS_GOOGLE_PLAY_URL"
|
|
},
|
|
{
|
|
"path": "totp.digits",
|
|
"secret": false,
|
|
"env": "AUTHELIA_TOTP_DIGITS"
|
|
},
|
|
{
|
|
"path": "totp.disable",
|
|
"secret": false,
|
|
"env": "AUTHELIA_TOTP_DISABLE"
|
|
},
|
|
{
|
|
"path": "totp.disable_reuse_security_policy",
|
|
"secret": false,
|
|
"env": "AUTHELIA_TOTP_DISABLE_REUSE_SECURITY_POLICY"
|
|
},
|
|
{
|
|
"path": "totp.issuer",
|
|
"secret": false,
|
|
"env": "AUTHELIA_TOTP_ISSUER"
|
|
},
|
|
{
|
|
"path": "totp.period",
|
|
"secret": false,
|
|
"env": "AUTHELIA_TOTP_PERIOD"
|
|
},
|
|
{
|
|
"path": "totp.secret_size",
|
|
"secret": false,
|
|
"env": "AUTHELIA_TOTP_SECRET_SIZE"
|
|
},
|
|
{
|
|
"path": "totp.skew",
|
|
"secret": false,
|
|
"env": "AUTHELIA_TOTP_SKEW"
|
|
},
|
|
{
|
|
"path": "webauthn.attestation_conveyance_preference",
|
|
"secret": false,
|
|
"env": "AUTHELIA_WEBAUTHN_ATTESTATION_CONVEYANCE_PREFERENCE"
|
|
},
|
|
{
|
|
"path": "webauthn.disable",
|
|
"secret": false,
|
|
"env": "AUTHELIA_WEBAUTHN_DISABLE"
|
|
},
|
|
{
|
|
"path": "webauthn.display_name",
|
|
"secret": false,
|
|
"env": "AUTHELIA_WEBAUTHN_DISPLAY_NAME"
|
|
},
|
|
{
|
|
"path": "webauthn.enable_passkey_login",
|
|
"secret": false,
|
|
"env": "AUTHELIA_WEBAUTHN_ENABLE_PASSKEY_LOGIN"
|
|
},
|
|
{
|
|
"path": "webauthn.experimental_enable_passkey_upgrade",
|
|
"secret": false,
|
|
"env": "AUTHELIA_WEBAUTHN_EXPERIMENTAL_ENABLE_PASSKEY_UPGRADE"
|
|
},
|
|
{
|
|
"path": "webauthn.experimental_enable_passkey_uv_two_factors",
|
|
"secret": false,
|
|
"env": "AUTHELIA_WEBAUTHN_EXPERIMENTAL_ENABLE_PASSKEY_UV_TWO_FACTORS"
|
|
},
|
|
{
|
|
"path": "webauthn.filtering.prohibit_backup_eligibility",
|
|
"secret": false,
|
|
"env": "AUTHELIA_WEBAUTHN_FILTERING_PROHIBIT_BACKUP_ELIGIBILITY"
|
|
},
|
|
{
|
|
"path": "webauthn.metadata.cache_policy",
|
|
"secret": false,
|
|
"env": "AUTHELIA_WEBAUTHN_METADATA_CACHE_POLICY"
|
|
},
|
|
{
|
|
"path": "webauthn.metadata.enabled",
|
|
"secret": false,
|
|
"env": "AUTHELIA_WEBAUTHN_METADATA_ENABLED"
|
|
},
|
|
{
|
|
"path": "webauthn.metadata.validate_entry",
|
|
"secret": false,
|
|
"env": "AUTHELIA_WEBAUTHN_METADATA_VALIDATE_ENTRY"
|
|
},
|
|
{
|
|
"path": "webauthn.metadata.validate_entry_permit_zero_aaguid",
|
|
"secret": false,
|
|
"env": "AUTHELIA_WEBAUTHN_METADATA_VALIDATE_ENTRY_PERMIT_ZERO_AAGUID"
|
|
},
|
|
{
|
|
"path": "webauthn.metadata.validate_status",
|
|
"secret": false,
|
|
"env": "AUTHELIA_WEBAUTHN_METADATA_VALIDATE_STATUS"
|
|
},
|
|
{
|
|
"path": "webauthn.metadata.validate_status_permitted",
|
|
"secret": false,
|
|
"env": "AUTHELIA_WEBAUTHN_METADATA_VALIDATE_STATUS_PERMITTED"
|
|
},
|
|
{
|
|
"path": "webauthn.metadata.validate_status_prohibited",
|
|
"secret": false,
|
|
"env": "AUTHELIA_WEBAUTHN_METADATA_VALIDATE_STATUS_PROHIBITED"
|
|
},
|
|
{
|
|
"path": "webauthn.metadata.validate_trust_anchor",
|
|
"secret": false,
|
|
"env": "AUTHELIA_WEBAUTHN_METADATA_VALIDATE_TRUST_ANCHOR"
|
|
},
|
|
{
|
|
"path": "webauthn.selection_criteria.attachment",
|
|
"secret": false,
|
|
"env": "AUTHELIA_WEBAUTHN_SELECTION_CRITERIA_ATTACHMENT"
|
|
},
|
|
{
|
|
"path": "webauthn.selection_criteria.discoverability",
|
|
"secret": false,
|
|
"env": "AUTHELIA_WEBAUTHN_SELECTION_CRITERIA_DISCOVERABILITY"
|
|
},
|
|
{
|
|
"path": "webauthn.selection_criteria.user_verification",
|
|
"secret": false,
|
|
"env": "AUTHELIA_WEBAUTHN_SELECTION_CRITERIA_USER_VERIFICATION"
|
|
},
|
|
{
|
|
"path": "webauthn.timeout",
|
|
"secret": false,
|
|
"env": "AUTHELIA_WEBAUTHN_TIMEOUT"
|
|
}
|
|
]
|