- Base + service (native binary), container (rootless quadlet), postgresql and redis subpackages - Fixed UID/GID 126 for the authelia user - Rootless pod publishing 127.0.0.1:9091; db and redis join the pod (container) or publish on localhost (service) - Container images pinned by digest - Native -service subpackage built conditionally (--without service)
20 lines
543 B
INI
20 lines
543 B
INI
[Unit]
|
|
Description=Authelia authentication and authorization server
|
|
|
|
[Container]
|
|
ContainerName=authelia
|
|
Image=docker.io/authelia/authelia:4.39.20@sha256:1b363e9279e742397966333f364e0876ae02bf5c876de73e83af6d48c57ff51b
|
|
Pod=authelia.pod
|
|
Exec=--config /etc/authelia/configuration.yml
|
|
Volume=/etc/authelia:/etc/authelia:ro,z
|
|
Volume=/var/lib/authelia/data:/var/lib/authelia/data:Z
|
|
Volume=/etc/localtime:/etc/localtime:ro
|
|
LogDriver=journald
|
|
|
|
[Service]
|
|
User=authelia
|
|
Environment=HOME=/var/lib/authelia
|
|
Restart=always
|
|
RestartSec=5
|
|
TimeoutStartSec=900
|