Skip to content

Commit 60add32

Browse files
nemchiknemchik
authored
Merge pull request #521 from linuxserver/authentik
Add authentik config lines and adjust comments
2 parents f7b1d15 + a2a4ec7 commit 60add32

File tree

266 files changed

+2188
-527
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

266 files changed

+2188
-527
lines changed

‎_template.subdomain.conf.sample

+9-2
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,9 @@
1-
## Version 2022/09/08
1+
## Version 2023/02/05
22
# REMOVE THIS LINE BEFORE SUBMITTING: The structure of the file (all of the existing lines) should be kept as close as possible to this template.
33
# REMOVE THIS LINE BEFORE SUBMITTING: Look through this file for <tags> and replace them. Review other sample files to see how things are done.
44
# REMOVE THIS LINE BEFORE SUBMITTING: The comment lines at the top of the file (below this line) should explain any prerequisites for using the proxy such as DNS or app settings.
5-
# make sure that your dns has a cname set for <container_name> and that your <container_name> container is not using a base url
5+
# make sure that your <container_name> container is named <container_name>
6+
# make sure that your dns has a cname set for <container_name>
67

78
server {
89
listen 443 ssl;
@@ -20,6 +21,9 @@ server {
2021
# enable for Authelia (requires authelia-location.conf in the location block)
2122
#include /config/nginx/authelia-server.conf;
2223

24+
# enable for Authentik (requires authentik-location.conf in the location block)
25+
#include /config/nginx/authentik-server.conf;
26+
2327
location / {
2428
# enable the next two lines for http auth
2529
#auth_basic "Restricted";
@@ -31,6 +35,9 @@ server {
3135
# enable for Authelia (requires authelia-server.conf in the server block)
3236
#include /config/nginx/authelia-location.conf;
3337

38+
# enable for Authentik (requires authentik-server.conf in the server block)
39+
#include /config/nginx/authentik-location.conf;
40+
3441
include /config/nginx/proxy.conf;
3542
include /config/nginx/resolver.conf;
3643
set $upstream_app <container_name>;

‎_template.subfolder.conf.sample

+7-2
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,10 @@
1-
## Version 2022/09/08
1+
## Version 2023/02/05
22
# REMOVE THIS LINE BEFORE SUBMITTING: The structure of the file (all of the existing lines) should be kept as close as possible to this template.
33
# REMOVE THIS LINE BEFORE SUBMITTING: Look through this file for <tags> and replace them. Review other sample files to see how things are done.
44
# REMOVE THIS LINE BEFORE SUBMITTING: The comment lines at the top of the file (below this line) should explain any prerequisites for using the proxy such as DNS or app settings.
5-
# first go into <container_name> settings, under "General" set the URL Base to /<container_name>/ and restart the <container_name> container
5+
# make sure that your <container_name> container is named <container_name>
6+
# make sure that <container_name> is set to work with the base url /<container_name>/
7+
68

79
location /<container_name> {
810
return 301 $scheme://$host/<container_name>/;
@@ -19,6 +21,9 @@ location ^~ /<container_name>/ {
1921
# enable for Authelia (requires authelia-server.conf in the server block)
2022
#include /config/nginx/authelia-location.conf;
2123

24+
# enable for Authentik (requires authentik-server.conf in the server block)
25+
#include /config/nginx/authentik-location.conf;
26+
2227
include /config/nginx/proxy.conf;
2328
include /config/nginx/resolver.conf;
2429
set $upstream_app <container_name>;

‎adguard.subdomain.conf.sample

+9-2
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,6 @@
1-
## Version 2022/09/08
2-
# make sure that your dns has a cname set for adguard and that your adguard container is named adguard
1+
## Version 2023/02/05
2+
# make sure that your adguard container is named adguard
3+
# make sure that your dns has a cname set for adguard
34

45
server {
56
listen 443 ssl;
@@ -17,6 +18,9 @@ server {
1718
# enable for Authelia (requires authelia-location.conf in the location block)
1819
#include /config/nginx/authelia-server.conf;
1920

21+
# enable for Authentik (requires authentik-location.conf in the location block)
22+
#include /config/nginx/authentik-server.conf;
23+
2024
location / {
2125
# enable the next two lines for http auth
2226
#auth_basic "Restricted";
@@ -28,6 +32,9 @@ server {
2832
# enable for Authelia (requires authelia-server.conf in the server block)
2933
#include /config/nginx/authelia-location.conf;
3034

35+
# enable for Authentik (requires authentik-server.conf in the server block)
36+
#include /config/nginx/authentik-location.conf;
37+
3138
include /config/nginx/proxy.conf;
3239
include /config/nginx/resolver.conf;
3340
set $upstream_app adguard;

‎adminer.subfolder.conf.sample

+6-2
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,6 @@
1-
## Version 2022/09/08
2-
# adminer does not require a base url setting, but the container needs to be named adminer
1+
## Version 2023/02/05
2+
# make sure that your adminer container is named adminer
3+
# adminer does not require a base url setting
34

45
location /adminer {
56
return 301 $scheme://$host/adminer/;
@@ -16,6 +17,9 @@ location ^~ /adminer/ {
1617
# enable for Authelia (requires authelia-server.conf in the server block)
1718
#include /config/nginx/authelia-location.conf;
1819

20+
# enable for Authentik (requires authentik-server.conf in the server block)
21+
#include /config/nginx/authentik-location.conf;
22+
1923
include /config/nginx/proxy.conf;
2024
include /config/nginx/resolver.conf;
2125
set $upstream_app adminer;

‎adminmongo.subdomain.conf.sample

+9-2
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,6 @@
1-
## Version 2022/09/08
2-
# make sure that your dns has a cname set for adminmongo and that your adminmongo container is not using a base url
1+
## Version 2023/02/05
2+
# make sure that your adminmongo container is named adminmongo
3+
# make sure that your dns has a cname set for adminmongo
34

45
server {
56
listen 443 ssl;
@@ -17,6 +18,9 @@ server {
1718
# enable for Authelia (requires authelia-location.conf in the location block)
1819
#include /config/nginx/authelia-server.conf;
1920

21+
# enable for Authentik (requires authentik-location.conf in the location block)
22+
#include /config/nginx/authentik-server.conf;
23+
2024
location / {
2125
# enable the next two lines for http auth
2226
#auth_basic "Restricted";
@@ -28,6 +32,9 @@ server {
2832
# enable for Authelia (requires authelia-server.conf in the server block)
2933
#include /config/nginx/authelia-location.conf;
3034

35+
# enable for Authentik (requires authentik-server.conf in the server block)
36+
#include /config/nginx/authentik-location.conf;
37+
3138
include /config/nginx/proxy.conf;
3239
include /config/nginx/resolver.conf;
3340
set $upstream_app adminmongo;

‎airsonic.subdomain.conf.sample

+9-2
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,6 @@
1-
## Version 2022/09/08
2-
# make sure that your dns has a cname set for airsonic and that your airsonic container is not using a base url
1+
## Version 2023/02/05
2+
# make sure that your airsonic container is named airsonic
3+
# make sure that your dns has a cname set for airsonic
34
# add `server.use-forward-headers=true` to `/config/application.properties` to ensure logs contain real source IP
45

56
server {
@@ -18,6 +19,9 @@ server {
1819
# enable for Authelia (requires authelia-location.conf in the location block)
1920
#include /config/nginx/authelia-server.conf;
2021

22+
# enable for Authentik (requires authentik-location.conf in the location block)
23+
#include /config/nginx/authentik-server.conf;
24+
2125
location / {
2226
# enable the next two lines for http auth
2327
#auth_basic "Restricted";
@@ -29,6 +33,9 @@ server {
2933
# enable for Authelia (requires authelia-server.conf in the server block)
3034
#include /config/nginx/authelia-location.conf;
3135

36+
# enable for Authentik (requires authentik-server.conf in the server block)
37+
#include /config/nginx/authentik-location.conf;
38+
3239
include /config/nginx/proxy.conf;
3340
include /config/nginx/resolver.conf;
3441
set $upstream_app airsonic;

‎airsonic.subfolder.conf.sample

+6-1
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,6 @@
1-
## Version 2022/09/08
1+
## Version 2023/02/05
2+
# make sure that your airsonic container is named airsonic
3+
# make sure that airsonic is set to work with the base url /airsonic/
24
# set the CONTEXT_PATH variable to /airsonic in airsonic container.
35

46
location ^~ /airsonic {
@@ -12,6 +14,9 @@ location ^~ /airsonic {
1214
# enable for Authelia (requires authelia-server.conf in the server block)
1315
#include /config/nginx/authelia-location.conf;
1416

17+
# enable for Authentik (requires authentik-server.conf in the server block)
18+
#include /config/nginx/authentik-location.conf;
19+
1520
include /config/nginx/proxy.conf;
1621
include /config/nginx/resolver.conf;
1722
set $upstream_app airsonic;

‎apprise-api.subdomain.conf.sample

+15-9
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,6 @@
1-
## Version 2022/08/16
2-
# make sure that your dns has a cname set for apprise-api and that your apprise-api container is not using a base url
1+
## Version 2023/02/05
2+
# make sure that your apprise-api container is named apprise-api
3+
# make sure that your dns has a cname set for apprise-api
34

45
server {
56
listen 443 ssl;
@@ -11,24 +12,29 @@ server {
1112

1213
client_max_body_size 0;
1314

14-
# enable for ldap auth, fill in ldap details in ldap.conf
15-
#include /config/nginx/ldap.conf;
15+
# enable for ldap auth (requires ldap-location.conf in the location block)
16+
#include /config/nginx/ldap-server.conf;
1617

17-
# enable for Authelia
18+
# enable for Authelia (requires authelia-location.conf in the location block)
1819
#include /config/nginx/authelia-server.conf;
1920

21+
# enable for Authentik (requires authentik-location.conf in the location block)
22+
#include /config/nginx/authentik-server.conf;
23+
2024
location / {
2125
# enable the next two lines for http auth
2226
#auth_basic "Restricted";
2327
#auth_basic_user_file /config/nginx/.htpasswd;
2428

25-
# enable the next two lines for ldap auth
26-
#auth_request /auth;
27-
#error_page 401 =200 /ldaplogin;
29+
# enable for ldap auth (requires ldap-server.conf in the server block)
30+
#include /config/nginx/ldap-location.conf;
2831

29-
# enable for Authelia
32+
# enable for Authelia (requires authelia-server.conf in the server block)
3033
#include /config/nginx/authelia-location.conf;
3134

35+
# enable for Authentik (requires authentik-server.conf in the server block)
36+
#include /config/nginx/authentik-location.conf;
37+
3238
include /config/nginx/proxy.conf;
3339
include /config/nginx/resolver.conf;
3440
set $upstream_app apprise-api;

‎archisteamfarm.subdomain.conf.sample

+8-1
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
1-
## Version 2022/09/08
1+
## Version 2023/02/05
2+
# make sure that your archisteamfarm container is named archisteamfarm
23
# make sure that your dns has a cname set for archisteamfarm
34

45
server {
@@ -17,6 +18,9 @@ server {
1718
# enable for Authelia (requires authelia-location.conf in the location block)
1819
#include /config/nginx/authelia-server.conf;
1920

21+
# enable for Authentik (requires authentik-location.conf in the location block)
22+
#include /config/nginx/authentik-server.conf;
23+
2024
location / {
2125
# enable the next two lines for http auth
2226
#auth_basic "Restricted";
@@ -28,6 +32,9 @@ server {
2832
# enable for Authelia (requires authelia-server.conf in the server block)
2933
#include /config/nginx/authelia-location.conf;
3034

35+
# enable for Authentik (requires authentik-server.conf in the server block)
36+
#include /config/nginx/authentik-location.conf;
37+
3138
include /config/nginx/proxy.conf;
3239
include /config/nginx/resolver.conf;
3340
set $upstream_app archisteamfarm;

‎aria2-with-webui.subdomain.conf.sample

+9-2
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,6 @@
1-
## Version 2022/09/08
2-
# Make sure that your dns has a cname set for aria2 and that your aria2-with-webui container is not using a base url
1+
## Version 2023/02/05
2+
# make sure that your aria2 container is named aria2-with-webui
3+
# make sure that your dns has a cname set for aria2
34
#
45
# The RPC port will need to be changed to 443 in the AriaNg/WebUI-Aria2 settings or by using the AriaNg command api
56
# e.g. https://aria2.example.com/#!/settings/rpc/set/https/aria2.example.com/443/jsonrpc
@@ -21,6 +22,9 @@ server {
2122
# enable for Authelia (requires authelia-location.conf in the location block)
2223
#include /config/nginx/authelia-server.conf;
2324

25+
# enable for Authentik (requires authentik-location.conf in the location block)
26+
#include /config/nginx/authentik-server.conf;
27+
2428
location / {
2529
# enable the next two lines for http auth
2630
#auth_basic "Restricted";
@@ -32,6 +36,9 @@ server {
3236
# enable for Authelia (requires authelia-server.conf in the server block)
3337
#include /config/nginx/authelia-location.conf;
3438

39+
# enable for Authentik (requires authentik-server.conf in the server block)
40+
#include /config/nginx/authentik-location.conf;
41+
3542
include /config/nginx/proxy.conf;
3643
include /config/nginx/resolver.conf;
3744
set $upstream_app aria2-with-webui;

‎audiobookshelf.subdomain.conf.sample

+9-2
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,6 @@
1-
## Version 2022/09/08
2-
# make sure that your dns has a cname set for audiobookshelf and that your audiobookshelf container is not using a base url
1+
## Version 2023/02/05
2+
# make sure that your audiobookshelf container is named audiobookshelf
3+
# make sure that your dns has a cname set for audiobookshelf
34

45
server {
56
listen 443 ssl;
@@ -17,6 +18,9 @@ server {
1718
# enable for Authelia (requires authelia-location.conf in the location block)
1819
#include /config/nginx/authelia-server.conf;
1920

21+
# enable for Authentik (requires authentik-location.conf in the location block)
22+
#include /config/nginx/authentik-server.conf;
23+
2024
location / {
2125
# enable the next two lines for http auth
2226
#auth_basic "Restricted";
@@ -28,6 +32,9 @@ server {
2832
# enable for Authelia (requires authelia-server.conf in the server block)
2933
#include /config/nginx/authelia-location.conf;
3034

35+
# enable for Authentik (requires authentik-server.conf in the server block)
36+
#include /config/nginx/authentik-location.conf;
37+
3138
include /config/nginx/proxy.conf;
3239
include /config/nginx/resolver.conf;
3340
set $upstream_app audiobookshelf;

‎audiobookshelf.subfolder.conf.sample

+6-1
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,6 @@
1-
## Version 2022/09/08
1+
## Version 2023/02/05
2+
# make sure that your audiobookshelf container is named audiobookshelf
3+
# make sure that audiobookshelf is set to work with the base url /audiobookshelf/
24
# set the CONTEXT_PATH variable to /audiobookshelf in audiobookshelf container.
35

46
location ^~ /audiobookshelf {
@@ -12,6 +14,9 @@ location ^~ /audiobookshelf {
1214
# enable for Authelia (requires authelia-server.conf in the server block)
1315
#include /config/nginx/authelia-location.conf;
1416

17+
# enable for Authentik (requires authentik-server.conf in the server block)
18+
#include /config/nginx/authentik-location.conf;
19+
1520
include /config/nginx/proxy.conf;
1621
include /config/nginx/resolver.conf;
1722
set $upstream_app audiobookshelf;

‎authelia.subdomain.conf.sample

+6-5
Original file line numberDiff line numberDiff line change
@@ -1,9 +1,10 @@
1-
## Version 2021/05/18
1+
## Version 2023/02/05
2+
# make sure that your authelia container is named authelia
23
# make sure that your dns has a cname set for authelia
3-
# the default authelia-server and authelia-location confs included with letsencrypt rely on
4-
# subfolder proxy at "/authelia" and enabling of this proxy conf is not necessary.
5-
# But if you'd like to use authelia via subdomain, you can enable this proxy and set up your own
6-
# authelia-server and authelia-location confs as described in authelia docs.
4+
# the default authelia-server and authelia-location confs included with swag rely on
5+
# a built-in subfolder proxy at "/authelia" and enabling this proxy conf is not necessary.
6+
# But if you'd like to use authelia via subdomain, you can enable this proxy and set
7+
# the $authelia_backed variable in the authelia-server.conf.
78

89
server {
910
listen 443 ssl;

‎authentik.subdomain.conf.sample

+25
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
## Version 2023/02/05
2+
# make sure that your authentik container is named authentik-server
3+
# make sure that your dns has a cname set for authentik
4+
5+
server {
6+
listen 443 ssl;
7+
listen [::]:443 ssl;
8+
9+
server_name authentik.*;
10+
11+
include /config/nginx/ssl.conf;
12+
13+
client_max_body_size 0;
14+
15+
location / {
16+
17+
include /config/nginx/proxy.conf;
18+
include /config/nginx/resolver.conf;
19+
set $upstream_app authentik-server;
20+
set $upstream_port 9000;
21+
set $upstream_proto http;
22+
proxy_pass $upstream_proto://$upstream_app:$upstream_port;
23+
24+
}
25+
}

‎babybuddy.subdomain.conf.sample

+8-1
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
1-
## Version 2022/09/08
1+
## Version 2023/02/05
2+
# make sure that your babybuddy container is named babybuddy
23
# make sure that your dns has a cname set for babybuddy
34

45
server {
@@ -17,6 +18,9 @@ server {
1718
# enable for Authelia (requires authelia-location.conf in the location block)
1819
#include /config/nginx/authelia-server.conf;
1920

21+
# enable for Authentik (requires authentik-location.conf in the location block)
22+
#include /config/nginx/authentik-server.conf;
23+
2024
location / {
2125
# enable the next two lines for http auth
2226
#auth_basic "Restricted";
@@ -28,6 +32,9 @@ server {
2832
# enable for Authelia (requires authelia-server.conf in the server block)
2933
#include /config/nginx/authelia-location.conf;
3034

35+
# enable for Authentik (requires authentik-server.conf in the server block)
36+
#include /config/nginx/authentik-location.conf;
37+
3138
include /config/nginx/proxy.conf;
3239
include /config/nginx/resolver.conf;
3340
set $upstream_app babybuddy;

0 commit comments

Comments
 (0)