From 87e5c0f069642045686ea4615087ed0decafc31f Mon Sep 17 00:00:00 2001 From: "Ezequiel C." Date: Fri, 11 Sep 2026 00:08:59 +0200 Subject: [PATCH] Authelia: add storage encryption_key, drop deprecated jwt_secret and duplicate redirection url Co-Authored-By: Claude Code --- services/authelia/configuration.yml | 12 +++++------- services/authelia/metadata.json | 4 ++-- 2 files changed, 7 insertions(+), 9 deletions(-) diff --git a/services/authelia/configuration.yml b/services/authelia/configuration.yml index 6e86886..0ff3e86 100644 --- a/services/authelia/configuration.yml +++ b/services/authelia/configuration.yml @@ -1,9 +1,9 @@ # Authelia configuration — https://www.authelia.com/configuration/prologue/introduction/ # -# Secrets (JWT_SECRET, RESET_JWT_SECRET, SESSION_SECRET, LDAP_ADMIN_PASSWORD, -# OIDC_HMAC_SECRET, OIDC_PORTAINER_SECRET) are resolved from the service's .env -# by the installer and substituted into this file on install/update, so they are -# not committed here. +# Secrets (RESET_JWT_SECRET, SESSION_SECRET, LDAP_ADMIN_PASSWORD, +# OIDC_HMAC_SECRET, OIDC_PORTAINER_SECRET, STORAGE_ENCRYPTION_KEY) are resolved +# from the service's .env by the installer and substituted into this file on +# install/update, so they are not committed here. # # The OIDC signing key (jwks) cannot be injected via env/file secrets (Authelia # does not support that for this field), so it is read from /config/oidc-jwks.pem @@ -12,8 +12,6 @@ theme: dark -jwt_secret: '${JWT_SECRET}' - server: address: 'tcp://0.0.0.0:9091/' endpoints: @@ -64,7 +62,6 @@ session: cookies: - domain: 'example.com' authelia_url: 'https://auth.example.com' - default_redirection_url: 'https://auth.example.com' regulation: max_retries: 3 @@ -72,6 +69,7 @@ regulation: ban_time: '5m' storage: + encryption_key: '${STORAGE_ENCRYPTION_KEY}' local: path: '/config/db.sqlite3' diff --git a/services/authelia/metadata.json b/services/authelia/metadata.json index e93b7b6..971051d 100644 --- a/services/authelia/metadata.json +++ b/services/authelia/metadata.json @@ -33,8 +33,8 @@ }, "env": [ { - "name": "JWT_SECRET", - "label": "JWT secret (auto-generated)", + "name": "STORAGE_ENCRYPTION_KEY", + "label": "Storage encryption key (auto-generated)", "generate": true }, {