75 lines
2.2 KiB
YAML
75 lines
2.2 KiB
YAML
# Copyright 2025-2026 Thomas Hintz
|
|
|
|
# This file is part of Nassella.
|
|
|
|
# Nassella is free software: you can redistribute it and/or modify it under the
|
|
# terms of the GNU Affero General Public License as published by the Free
|
|
# Software Foundation, either version 3 of the License, or (at your option) any
|
|
# later version.
|
|
|
|
# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY
|
|
# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
|
|
# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.
|
|
|
|
# You should have received a copy of the GNU Affero General Public License
|
|
# along with Nassella. If not, see <https://www.gnu.org/licenses/>.
|
|
|
|
secrets:
|
|
authelia_postgres_db:
|
|
file: ./authelia/postgres_db
|
|
authelia_postgres_password:
|
|
file: ./authelia/postgres_password
|
|
authelia_postgres_user:
|
|
file: ./authelia/postgres_user
|
|
|
|
services:
|
|
authelia_db:
|
|
image: postgres:18-trixie
|
|
environment:
|
|
- POSTGRES_DB_FILE=/run/secrets/authelia_postgres_db
|
|
- POSTGRES_USER_FILE=/run/secrets/authelia_postgres_user
|
|
- POSTGRES_PASSWORD_FILE=/run/secrets/authelia_postgres_password
|
|
shm_size: 128mb
|
|
restart: always
|
|
volumes:
|
|
- /nassella/authelia/var-lib-postgresql:/var/lib/postgresql
|
|
networks:
|
|
- authelia_internal_db
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -d `cat $$POSTGRES_DB_FILE` -U `cat $$POSTGRES_USER_FILE`"]
|
|
start_period: 15s
|
|
interval: 30s
|
|
retries: 3
|
|
timeout: 5s
|
|
secrets:
|
|
- authelia_postgres_db
|
|
- authelia_postgres_password
|
|
- authelia_postgres_user
|
|
|
|
authelia:
|
|
image: 'authelia/authelia'
|
|
volumes:
|
|
- ./authelia/authelia-config/configuration.yml:/config/configuration.yml:ro
|
|
networks:
|
|
- lb
|
|
- authelia_internal_db
|
|
- lldap_internal
|
|
depends_on:
|
|
lldap:
|
|
condition: service_healthy
|
|
authelia_db:
|
|
condition: service_healthy
|
|
restart: 'unless-stopped'
|
|
healthcheck:
|
|
## In production the healthcheck section should be commented.
|
|
disable: true
|
|
|
|
networks:
|
|
lb:
|
|
lldap_internal:
|
|
driver: bridge
|
|
internal: true
|
|
authelia_internal_db:
|
|
driver: bridge
|
|
internal: true
|