server.address: tcp://0.0.0.0:9091

log:
  level: info

identity_validation.reset_password.jwt_secret: T72Xcxa4d7xpQRypFDZpunlZt0IjqspojmBlxBr69gnkRjzR144YgjZsgFYZK0gS

session:
  secret: BYksO7YUAJ8gXx9Endgpe46RgB10nkeKpD1qcQPt0GuYGQm2pS2zjJtNOrCEqpav
  cookies:
    - domain: lan.ddnsgeek.com
      authelia_url: https://auth.lan.ddnsgeek.com

storage:
  encryption_key: N7mkWziClgDhLgZDRkRwU6jEHmGF6ciOt53pzoFcZ0meEV1AZCC5bWZd24jeu19y
  local:
    path: /config/data/db.sqlite3

authentication_backend:
  file:
    path: /config/users_database.yml

access_control:
  default_policy: deny
  rules:
    - domain: alertmanager.lan.ddnsgeek.com
      resources:
        - "^/api/.*"
      policy: bypass

    - domain: influxdb.lan.ddnsgeek.com
      resources:
        - "^/health"
      policy: bypass

    - domain: node-red.lan.ddnsgeek.com
      resources:
        - "^/health"
        - "^/uptime-kuma"
        - "^/docker-update-lockouts/clear"
      policy: bypass

    - domain: prometheus.lan.ddnsgeek.com
      resources:
        - "^/-/healthy"
      policy: bypass

    - domain: traefik.lan.ddnsgeek.com
      resources:
        - "^/metrics"
      policy: bypass

    - domain: "*.lan.ddnsgeek.com"
      policy: two_factor

notifier:
  filesystem:
    filename: /config/data/notification.txt