Bind to the loopback interface only to access via reverse proxy

actual/docker-compose.yml

@@ -0,0 +1,14 @@
+services:
+  actual_server:
+    image: docker.io/actualbudget/actual-server:latest
+    ports:
+      - "5010:5006"
+    volumes:
+      - ./actual-data:/data
+    healthcheck:
+      test: ["CMD-SHELL", "node src/scripts/health-check.js"]
+      interval: 60s
+      timeout: 10s
+      retries: 3
+      start_period: 20s
+    restart: unless-stopped

authelia/config/configuration.yml

@@ -1,116 +0,0 @@
-##############################################################################
-#                   Authelia configuration                                   #
-##############################################################################
-
-server:
-  host: 0.0.0.0
-  port: 8080 # if you need this changed make sure it reflects also in the docker-compose.yml
-log:
-  level: info
-jwt_secret: # insert secret
-default_redirection_url: https://auth.jaredtsmith.com
-totp:
-  issuer: jaredtsmith.com
-  period: 30
-  skew: 1
-
-authentication_backend:
-  password_reset: 
-    disable: false
-  file:
-    path: /config/users_database.yml # Make sure this file exists
-    password:
-      algorithm: argon2id
-      iterations: 1
-      salt_length: 16
-      parallelism: 8
-      memory: 64
-
-access_control:
-  default_policy: deny
-  rules:
-    # Rules applied to everyone
-    - domain:
-        - "auth.jaredtsmith.com"
-        - "wikidata.jaredtsmith.com"
-      policy: bypass
-    - domain: # Proxies only requiring username and password
-        - "wiki.jaredtsmith.com"
-        - "wikidata-admin.jaredtsmith.com"
-      policy: one_factor
-    - domain: # Proxies needing 2 factor below
-        - "budget.jaredtsmith.com"
-        - "budget1.jaredtsmith.com"
-      policy: two_factor
-
-         
-session:
-  name: authelia_session
-  secret: # insert secret
-  expiration: 3600 # 1 hour
-  inactivity: 7200 # 2 hours
-  domain: jaredtsmith.com # Needs to be your root domain
-
-  redis:
-    host: authelia-redis-1
-    port: 6379
-    password: # insert secret
-
-regulation:
-  max_retries: 5
-  find_time: 2m
-  ban_time: 10m
-
-theme: dark   # options: dark, light
-
-storage:
-  encryption_key: # insert secret
-  local:
-    path: /config/db.sqlite3
-    
-notifier:
- smtp:
-   username: admin@jaredtsmith.com
-   password: # insert password
-   host: mail.jaredtsmith.com
-   port: 465  # 25 non-ssl, 443 ssl, 587 tls
-   sender: authelia@auth.jaredtsmith.com
-   subject: "[Authelia] {title}"
-   disable_require_tls: true # set to true if your domain uses no tls or ssl only
-   disable_html_emails: false # set to true if you don't want html in your emails
-
-identity_providers:
-  oidc:
-    hmac_secret: 
-    issuer_private_key: |
-      --- KEY START
-      --- KEY END
-    access_token_lifespan: 1h
-    authorize_code_lifespan: 1m
-    id_token_lifespan: 1h
-    refresh_token_lifespan: 90m
-    enable_client_debug_messages: false
-    clients:
-      - id: outline
-        description: Outline Wiki
-        secret: 
-        public: false
-        authorization_policy: one_factor
-        audience: []
-        scopes:
-          - openid
-          - groups
-          - email
-          - profile
-        redirect_uris:
-          - https://wiki.jaredtsmith.com/auth/oidc.callback
-        grant_types:
-          - refresh_token
-          - authorization_code
-        response_types:
-          - code
-        response_modes:
-          - form_post
-          - query
-          - fragment
-        userinfo_signing_algorithm: none

authelia/config/users_database.yml

@@ -1,27 +0,0 @@
-###############################################################
-#                         Users Database                      #
-###############################################################
- 
-# This file can be used if you do not have an LDAP set up.
- 
-# List of users
-users:
-  jared:
-    displayname: "Jared Smith"
-    password: "$argon2id$v=19$m=65536,t=1,p=8$aUxYVkxUUVhSbVdLQmh1aQ$+9n4HtCZm9vRN6fKOCt5MUbj85TL3ybu6/gHrJjxTno"
-    email: jts@jaredtsmith.com
-    groups:
-      - admins
-      - users
-  mel:
-    displayname: "Mel Smith"
-    password: "$argon2id$v=19$m=65536,t=1,p=8$aUxYVkxUUVhSbVdLQmh1aQ$+9n4HtCZm9vRN6fKOCt5MUbj85TL3ybu6/gHrJjxTno"
-    email: jollymel2@gmail.com
-    groups:
-      - users
-  jess:
-    displayname: "Jess Davies"
-    password: "$argon2id$v=19$m=65536,t=1,p=8$aUxYVkxUUVhSbVdLQmh1aQ$+9n4HtCZm9vRN6fKOCt5MUbj85TL3ybu6/gHrJjxTno"
-    email: jessicadavies3000@gmail.com
-    groups:
-      - users

authelia/docker-compose.yml

@@ -5,7 +5,7 @@ services:
     volumes:
       - /etc/authelia/config:/config
     ports:
-      - 8080:8080
+      - "127.0.0.1:8080:8080"
     restart: unless-stopped
     healthcheck:
       disable: true