feat: Authelia SSO stack for auth.schwenk.online

Compose + Traefik ForwardAuth middleware, Redis sessions, SMTP via 0012.de, TOTP and ACL for consumer apps (e.g. pi.schwenk.online). Co-authored-by: Cursor <cursoragent@cursor.com>
2026-08-01 10:29:17 +02:00
commit 93c78f503e
15 changed files with 1186 additions and 0 deletions
@@ -0,0 +1,14 @@
+---
+# Copy to users_database.yml on the server and replace the password hash.
+# Generate hash:
+#   docker run --rm authelia/authelia:4.39 authelia crypto hash generate argon2 --password 'YOUR_PASSWORD'
+#
+# Use an email inbox that accepts mail from 0012.de SMTP (Tuta may reject).
+
+users:
+  frank:
+    displayname: 'Fränky'
+    password: '$argon2id$v=19$m=65536,t=3,p=4$REPLACE_WITH_REAL_HASH'
+    email: 'cuidas@gmail.com'
+    groups:
+      - 'admins'