zpericic
755fe4e81e
- Base + service (native binary), container (rootless quadlet), postgresql and redis subpackages - Fixed UID/GID 126 for the authelia user - Rootless pod publishing 127.0.0.1:9091; db and redis join the pod (container) or publish on localhost (service) - Container images pinned by digest - Native -service subpackage built conditionally (--without service)
32 lines
778 B
Desktop File
32 lines
778 B
Desktop File
[Unit]
|
|
Description=Authelia authentication and authorization server
|
|
Documentation=https://www.authelia.com
|
|
After=network.target
|
|
|
|
[Service]
|
|
User=authelia
|
|
Group=authelia
|
|
UMask=027
|
|
Environment=AUTHELIA_SERVER_ADDRESS=tcp://127.0.0.1:9091/
|
|
Environment=AUTHELIA_SERVER_DISABLE_HEALTHCHECK=true
|
|
ExecStart=/usr/libexec/authelia --config /etc/authelia/configuration.yml
|
|
Restart=always
|
|
RestartSec=3
|
|
SyslogIdentifier=authelia
|
|
CapabilityBoundingSet=
|
|
NoNewPrivileges=yes
|
|
RestrictNamespaces=yes
|
|
ProtectHome=true
|
|
ProtectSystem=strict
|
|
ReadWritePaths=/var/lib/authelia
|
|
PrivateDevices=yes
|
|
ProtectControlGroups=yes
|
|
ProtectKernelModules=yes
|
|
ProtectKernelTunables=yes
|
|
SystemCallArchitectures=native
|
|
SystemCallFilter=@system-service
|
|
SystemCallErrorNumber=EPERM
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|