server.address: tcp://0.0.0.0:9091

log:
  level: info

identity_validation.reset_password.jwt_secret: ${AUTHELIA_JWT_SECRET}

session:
  secret: ${AUTHELIA_SESSION_SECRET}
  cookies:
    - domain: lan.ddnsgeek.com
      authelia_url: https://auth.lan.ddnsgeek.com

storage:
  encryption_key: ${AUTHELIA_STORAGE_ENCRYPTION_KEY}
  local:
    path: /config/data/db.sqlite3

authentication_backend:
  file:
    path: /config/users_database.yml

access_control:
  default_policy: deny
  rules:
    - domain: alertmanager.lan.ddnsgeek.com
      resources:
        - "^/api/.*"
      policy: bypass

    - domain: influxdb.lan.ddnsgeek.com
      resources:
        - "^/health"
      policy: bypass

    - domain: prometheus.lan.ddnsgeek.com
      resources:
        - "^/-/healthy"
      policy: bypass

    - domain: traefik.lan.ddnsgeek.com
      resources:
        - "^/metrics"
      policy: bypass

    - domain: "*.lan.ddnsgeek.com"
      policy: two_factor

notifier:
  filesystem:
    filename: /config/data/notification.txt