add authelia subdomain conf and add auth support

Starker3 · May 24, 2020 · eb55108 · eb55108
1 parent 14eb015
commit eb55108
Show file tree

Hide file tree

Showing 140 changed files with 713 additions and 0 deletions.
diff --git a/adguard.subdomain.conf.sample b/adguard.subdomain.conf.sample
@@ -13,6 +13,9 @@ server {
     # enable for ldap auth, fill in ldap details in ldap.conf
     #include /config/nginx/ldap.conf;
 
+    # enable for Authelia
+    #include /config/nginx/authelia-server.conf;
+
     location / {
         # enable the next two lines for http auth
         #auth_basic "Restricted";
@@ -22,6 +25,9 @@ server {
         #auth_request /auth;
         #error_page 401 =200 /login;
 
+        # enable for Authelia
+        #include /config/nginx/authelia-location.conf;
+
         include /config/nginx/proxy.conf;
         resolver 127.0.0.11 valid=30s;
         set $upstream_app adguard;

diff --git a/adminer.subfolder.conf.sample b/adminer.subfolder.conf.sample
@@ -12,6 +12,9 @@ location ^~ /adminer/ {
     #auth_request /auth;
     #error_page 401 =200 /login;
 
+    # enable for Authelia
+    #include /config/nginx/authelia-location.conf;
+
     include /config/nginx/proxy.conf;
     resolver 127.0.0.11 valid=30s;
     set $upstream_app adminer;

diff --git a/airsonic.subdomain.conf.sample b/airsonic.subdomain.conf.sample
@@ -14,6 +14,9 @@ server {
     # enable for ldap auth, fill in ldap details in ldap.conf
     #include /config/nginx/ldap.conf;
 
+    # enable for Authelia
+    #include /config/nginx/authelia-server.conf;
+
     location / {
         # enable the next two lines for http auth
         #auth_basic "Restricted";
@@ -23,6 +26,9 @@ server {
         #auth_request /auth;
         #error_page 401 =200 /login;
 
+        # enable for Authelia
+        #include /config/nginx/authelia-location.conf;
+
         include /config/nginx/proxy.conf;
         resolver 127.0.0.11 valid=30s;
         set $upstream_app airsonic;

diff --git a/airsonic.subfolder.conf.sample b/airsonic.subfolder.conf.sample
@@ -9,6 +9,9 @@ location ^~ /airsonic {
     #auth_request /auth;
     #error_page 401 =200 /login;
 
+    # enable for Authelia
+    #include /config/nginx/authelia-location.conf;
+
     include /config/nginx/proxy.conf;
     resolver 127.0.0.11 valid=30s;
     set $upstream_app airsonic;

diff --git a/authelia.subdomain.conf.sample b/authelia.subdomain.conf.sample
@@ -0,0 +1,23 @@
+# make sure that your dns has a cname set for authelia
+
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl;
+
+    server_name authelia.*;
+
+    include /config/nginx/ssl.conf;
+
+    client_max_body_size 0;
+
+    location / {
+
+        include /config/nginx/proxy.conf;
+        resolver 127.0.0.11 valid=30s;
+        set $upstream_app authelia;
+        set $upstream_port 9091;
+        set $upstream_proto http;
+        proxy_pass $upstream_proto://$upstream_app:$upstream_port;
+
+    }
+}
diff --git a/bazarr.subdomain.conf.sample b/bazarr.subdomain.conf.sample
@@ -13,6 +13,9 @@ server {
     # enable for ldap auth, fill in ldap details in ldap.conf
     #include /config/nginx/ldap.conf;
 
+    # enable for Authelia
+    #include /config/nginx/authelia-server.conf;
+
     location / {
         # enable the next two lines for http auth
         #auth_basic "Restricted";
@@ -22,6 +25,9 @@ server {
         #auth_request /auth;
         #error_page 401 =200 /login;
 
+        # enable for Authelia
+        #include /config/nginx/authelia-location.conf;
+
         include /config/nginx/proxy.conf;
         resolver 127.0.0.11 valid=30s;
         set $upstream_app bazarr;

diff --git a/bazarr.subfolder.conf.sample b/bazarr.subfolder.conf.sample
@@ -12,6 +12,9 @@ location ^~ /bazarr/ {
     #auth_request /auth;
     #error_page 401 =200 /login;
 
+    # enable for Authelia
+    #include /config/nginx/authelia-location.conf;
+
     include /config/nginx/proxy.conf;
     resolver 127.0.0.11 valid=30s;
     set $upstream_app bazarr;

diff --git a/beets.subdomain.conf.sample b/beets.subdomain.conf.sample
@@ -14,6 +14,9 @@ server {
     #enable for ldap auth, fill in ldap details in ldap.conf
     #include /config/nginx/ldap.conf;
 
+    # enable for Authelia
+    #include /config/nginx/authelia-server.conf;
+
     location / {
         #enable the next two lines for http auth
         #auth_basic "Restricted";
@@ -23,6 +26,9 @@ server {
         #auth_request /auth;
         #error_page 401 =200 /login;
 
+        # enable for Authelia
+        #include /config/nginx/authelia-location.conf;
+
         include /config/nginx/proxy.conf;
         resolver 127.0.0.11 valid=30s;
         set $upstream_app beets;

diff --git a/beets.subfolder.conf.sample b/beets.subfolder.conf.sample
@@ -9,6 +9,9 @@ location /beets {
     #auth_request /auth;
     #error_page 401 =200 /login;
 
+    # enable for Authelia
+    #include /config/nginx/authelia-location.conf;
+
     include /config/nginx/proxy.conf;
     resolver 127.0.0.11 valid=30s;
     set $upstream_app beets;

diff --git a/bitwarden.subdomain.conf.sample b/bitwarden.subdomain.conf.sample
@@ -14,6 +14,9 @@ server {
     # enable for ldap auth, fill in ldap details in ldap.conf
     #include /config/nginx/ldap.conf;
 
+    # enable for Authelia
+    #include /config/nginx/authelia-server.conf;
+
     location / {
         # enable the next two lines for http auth
         #auth_basic "Restricted";
@@ -23,6 +26,9 @@ server {
         #auth_request /auth;
         #error_page 401 =200 /login;
 
+        # enable for Authelia
+        #include /config/nginx/authelia-location.conf;
+
         include /config/nginx/proxy.conf;
         resolver 127.0.0.11 valid=30s;
         set $upstream_app bitwarden;

diff --git a/boinc.subdomain.conf.sample b/boinc.subdomain.conf.sample
@@ -13,6 +13,9 @@ server {
     # enable for ldap auth, fill in ldap details in ldap.conf
     #include /config/nginx/ldap.conf;
 
+    # enable for Authelia
+    #include /config/nginx/authelia-server.conf;
+
     location / {
         # enable the next two lines for http auth
         #auth_basic "Restricted";
@@ -22,6 +25,9 @@ server {
         #auth_request /auth;
         #error_page 401 =200 /login;
 
+        # enable for Authelia
+        #include /config/nginx/authelia-location.conf;
+
         include /config/nginx/proxy.conf;
         proxy_buffering off;
         resolver 127.0.0.11 valid=30s;

diff --git a/booksonic.subdomain.conf.sample b/booksonic.subdomain.conf.sample
@@ -13,6 +13,9 @@ server {
     # enable for ldap auth, fill in ldap details in ldap.conf
     #include /config/nginx/ldap.conf;
 
+    # enable for Authelia
+    #include /config/nginx/authelia-server.conf;
+
     location / {
         # enable the next two lines for http auth
         #auth_basic "Restricted";
@@ -22,6 +25,9 @@ server {
         #auth_request /auth;
         #error_page 401 =200 /login;
 
+        # enable for Authelia
+        #include /config/nginx/authelia-location.conf;
+
         include /config/nginx/proxy.conf;
         resolver 127.0.0.11 valid=30s;
         set $upstream_app booksonic;

diff --git a/booksonic.subfolder.conf.sample b/booksonic.subfolder.conf.sample
@@ -9,6 +9,9 @@ location ^~ /booksonic {
     #auth_request /auth;
     #error_page 401 =200 /login;
 
+    # enable for Authelia
+    #include /config/nginx/authelia-location.conf;
+
     include /config/nginx/proxy.conf;
     resolver 127.0.0.11 valid=30s;
     set $upstream_app booksonic;

diff --git a/bookstack.subdomain.conf.sample b/bookstack.subdomain.conf.sample
@@ -21,6 +21,9 @@ server {
         #auth_request /auth;
         #error_page 401 =200 /login;
 
+        # enable for Authelia
+        #include /config/nginx/authelia-location.conf;
+
         include /config/nginx/proxy.conf;
         resolver 127.0.0.11 valid=30s;
         set $upstream_app bookstack;

diff --git a/calibre-web.subdomain.conf.sample b/calibre-web.subdomain.conf.sample
@@ -13,6 +13,9 @@ server {
     # enable for ldap auth, fill in ldap details in ldap.conf
     #include /config/nginx/ldap.conf;
 
+    # enable for Authelia
+    #include /config/nginx/authelia-server.conf;
+
 	location / {
 		# enable the next two lines for http auth
 		#auth_basic "Restricted";
@@ -22,6 +25,9 @@ server {
 		#auth_request /auth;
 		#error_page 401 =200 /login;
 
+        # enable for Authelia
+        #include /config/nginx/authelia-location.conf;
+
     include /config/nginx/proxy.conf;
 		resolver 127.0.0.11 valid=30s;
 		set $upstream_app calibre-web;

diff --git a/calibre-web.subfolder.conf.sample b/calibre-web.subfolder.conf.sample
@@ -12,6 +12,9 @@ location ^~ /calibre-web/ {
     #auth_request /auth;
     #error_page 401 =200 /login;
 
+    # enable for Authelia
+    #include /config/nginx/authelia-location.conf;
+
     resolver 127.0.0.11 valid=30s;
     set $upstream_app calibre-web;
     set $upstream_port 8083;

diff --git a/calibre.subdomain.conf.sample b/calibre.subdomain.conf.sample
@@ -13,6 +13,9 @@ server {
     # enable for ldap auth, fill in ldap details in ldap.conf
     #include /config/nginx/ldap.conf;
 
+    # enable for Authelia
+    #include /config/nginx/authelia-server.conf;
+
     location / {
         # enable the next two lines for http auth
         #auth_basic "Restricted";
@@ -22,6 +25,9 @@ server {
         #auth_request /auth;
         #error_page 401 =200 /login;
 
+        # enable for Authelia
+        #include /config/nginx/authelia-location.conf;
+
         resolver 127.0.0.11 valid=30s;
         set $upstream_app calibre;
         set $upstream_port 8080;

diff --git a/calibre.subfolder.conf.sample b/calibre.subfolder.conf.sample
@@ -12,6 +12,9 @@ location ^~ /calibre/ {
     #auth_request /auth;
     #error_page 401 =200 /login;
 
+    # enable for Authelia
+    #include /config/nginx/authelia-location.conf;
+
     resolver 127.0.0.11 valid=30s;
     set $upstream_app calibre;
     set $upstream_port 8080;

diff --git a/code-server.subdomain.conf.sample b/code-server.subdomain.conf.sample
@@ -13,6 +13,9 @@ server {
     # enable for ldap auth, fill in ldap details in ldap.conf
     #include /config/nginx/ldap.conf;
 
+    # enable for Authelia
+    #include /config/nginx/authelia-server.conf;
+
     location / {
         # enable the next two lines for http auth
         #auth_basic "Restricted";
@@ -22,6 +25,9 @@ server {
         #auth_request /auth;
         #error_page 401 =200 /login;
 
+        # enable for Authelia
+        #include /config/nginx/authelia-location.conf;
+
         include /config/nginx/proxy.conf;
         resolver 127.0.0.11 valid=30s;
         set $upstream_app code-server;

diff --git a/codimd.subdomain.conf.sample b/codimd.subdomain.conf.sample
@@ -15,6 +15,9 @@ server {
     # enable for ldap auth, fill in ldap details in ldap.conf
     #include /config/nginx/ldap.conf;
 
+    # enable for Authelia
+    #include /config/nginx/authelia-server.conf;
+
     location / {
         # enable the next two lines for http auth
         #auth_basic "Restricted";
@@ -24,6 +27,9 @@ server {
         #auth_request /auth;
         #error_page 401 =200 /login;
 
+        # enable for Authelia
+        #include /config/nginx/authelia-location.conf;
+
         include /config/nginx/proxy.conf;
         resolver 127.0.0.11 valid=30s;
         set $upstream_app codimd;

diff --git a/couchpotato.subdomain.conf.sample b/couchpotato.subdomain.conf.sample
@@ -13,6 +13,9 @@ server {
     # enable for ldap auth, fill in ldap details in ldap.conf
     #include /config/nginx/ldap.conf;
 
+    # enable for Authelia
+    #include /config/nginx/authelia-server.conf;
+
     location / {
         # enable the next two lines for http auth
         #auth_basic "Restricted";
@@ -22,6 +25,9 @@ server {
         #auth_request /auth;
         #error_page 401 =200 /login;
 
+        # enable for Authelia
+        #include /config/nginx/authelia-location.conf;
+
         include /config/nginx/proxy.conf;
         resolver 127.0.0.11 valid=30s;
         set $upstream_app couchpotato;

diff --git a/couchpotato.subfolder.conf.sample b/couchpotato.subfolder.conf.sample
@@ -9,6 +9,9 @@ location ^~ /couchpotato {
     #auth_request /auth;
     #error_page 401 =200 /login;
 
+    # enable for Authelia
+    #include /config/nginx/authelia-location.conf;
+
     include /config/nginx/proxy.conf;
     resolver 127.0.0.11 valid=30s;
     set $upstream_app couchpotato;

diff --git a/deluge.subdomain.conf.sample b/deluge.subdomain.conf.sample
@@ -13,6 +13,9 @@ server {
     # enable for ldap auth, fill in ldap details in ldap.conf
     #include /config/nginx/ldap.conf;
 
+    # enable for Authelia
+    #include /config/nginx/authelia-server.conf;
+
     location / {
         # enable the next two lines for http auth
         #auth_basic "Restricted";
@@ -22,6 +25,9 @@ server {
         #auth_request /auth;
         #error_page 401 =200 /login;
 
+        # enable for Authelia
+        #include /config/nginx/authelia-location.conf;
+
         include /config/nginx/proxy.conf;
         resolver 127.0.0.11 valid=30s;
         set $upstream_app deluge;

diff --git a/deluge.subfolder.conf.sample b/deluge.subfolder.conf.sample
@@ -12,6 +12,9 @@ location ^~ /deluge/ {
     #auth_request /auth;
     #error_page 401 =200 /login;
 
+    # enable for Authelia
+    #include /config/nginx/authelia-location.conf;
+
     include /config/nginx/proxy.conf;
     resolver 127.0.0.11 valid=30s;
     set $upstream_app deluge;