froxxxy/authschwenkonline
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: load SMTP via secret files on submissions:465

Browse Source 
Env-based notifier creds were unreliable; use secrets/smtp_*.txt, RFC5322 sender, and implicit TLS to 0012.de Plesk.

Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
Frank Schwenk
2026-08-01 10:51:55 +02:00
parent 93c78f503e
commit a3188264b0
4 changed files with 38 additions and 24 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+18 -7
View File
@@ -40,8 +40,8 @@ Zusätzlich in diesem Repo unter `config/configuration.yml` → `access_control.
| `compose.yml` | Authelia, Redis, whoami-Smoke |
| `config/configuration.yml` | Authelia-Config (kein Secret-Inhalt) |
| `config/users_database.yml.example` | User-Template |
| `secrets/` | `jwt_secret.txt`, `session_secret.txt`, `storage_encryption_key.txt` (nur auf dem Server) |
| `.env` | SMTP + TZ (nur auf dem Server) |
| `secrets/` | `jwt_secret.txt`, `session_secret.txt`, `storage_encryption_key.txt`, `smtp_username.txt`, `smtp_password.txt`, `smtp_sender.txt` (nur auf dem Server) |
| `.env` | `TZ` (+ optional Log-Level); SMTP-Passwort gehört in `secrets/smtp_*.txt` |
## Deploy (boka)
@@ -65,6 +65,18 @@ docker run --rm -u 8000:8000 -v "$(pwd)/secrets:/secrets" authelia/authelia:4.39
session_secret.txt storage_encryption_key.txt jwt_secret.txt'
```
SMTP (0012.de) — Dateien unter `secrets/` (UID 8000):
```bash
# as root / via docker if secrets/ is 0700 for uid 8000
printf '%s\n' 'auth@0012.de' > secrets/smtp_username.txt
printf '%s\n' 'YOUR_SMTP_PASSWORD' > secrets/smtp_password.txt
printf '%s\n' 'Authelia <auth@0012.de>' > secrets/smtp_sender.txt
chown 8000:8000 secrets/smtp_*.txt && chmod 600 secrets/smtp_*.txt
```
Notifier: `submissions://ha01s019.org-dns.com:465` (implizites TLS). Sender-Format muss RFC5322 sein: `Name <user@domain>` — kein unquoted `foo.bar.baz <…>`.
### User-DB
```bash
@@ -84,11 +96,10 @@ docker compose logs -f authelia
## SMTP (0012.de)
Notifier nutzt Plesk-SMTP wie in `0012` Todo 11 / `server.env`:
- Host `ha01s019.org-dns.com`, Port `587` (STARTTLS / `submission://`)
- Login `admin@0012.de`, From z.B. `Authelia <monitor@0012.de>`
- Passwort nur in `.env` als `AUTHELIA_NOTIFIER_SMTP_PASSWORD`
- Host `ha01s019.org-dns.com`, Port **465** (`submissions://`), Auth z.B. `auth@0012.de`
- Credentials nur in `secrets/smtp_*.txt` (siehe oben)
- Startup-Check sendet **keine** Mail — nur Verbindungs-Check
- Test von boka: Python/`swaks` an `cuidas@gmail.com`; Authelia-Logs bei Erfolg: Trace `Timing Attack Delay successful: true` nach „Sending an email…“
## TOTP-Enrollment