authelia helm release

authelia helm

Authelia is an open-source authentication and authorization server and portal fulfilling the identity and access management (IAM) role of information security in providing multi-factor authentication and single sign-on (SSO) for your applications via a web portal. It acts as a companion for common reverse proxies.

Install

Install with:

helm repo add app-template oci://ghcr.io/bjw-s-labs/charts/
helm install authelia app-template/app-template -f values.yaml

Examples

See examples from other people.

Major version:

Filter repos who also have:

Top Repositories (3 out of 24)

Name	Repo	Stars	Version	Timestamp
authelia	Diaoul/home-ops	113	5.0.0	6 days ago
authelia	mchestr/home-cluster	162	4.6.2	a month ago
authelia	brettinternet/homeops	212	3.5.1	a year ago

Name

Repo

Stars

Version

Timestamp

authelia

Diaoul/home-ops

113

5.0.0

6 days ago

authelia

mchestr/home-cluster

162

4.6.2

a month ago

authelia

brettinternet/homeops

212

3.5.1

a year ago

Values

See the most popular values for this chart:

Key	Types
persistence.config.name (24) `authelia-configmap`	string
persistence.config.type (24) `configMap`	string
persistence.config.globalMounts[].path (21) `/config/configuration.yaml`	string
persistence.config.globalMounts[].subPath (21) `configuration.yaml`	string
persistence.config.globalMounts[].readOnly (17) `true`	boolean
persistence.config.enabled (10) `true`	boolean
persistence.config.advancedMounts.authelia.app[].path (2) `/config/configuration.yaml`	string
persistence.config.advancedMounts.authelia.app[].readOnly (2) `true`	boolean
persistence.config.advancedMounts.authelia.app[].subPath (2) `configuration.yaml`	string
persistence.config.mountPath (1) `/config/configuration.yaml`	string
persistence.config.readOnly (1) `false`	boolean
persistence.config.subPath (1) `configuration.yaml`	string
persistence.secret-files.name (6) `authelia-files`	string
persistence.secret-files.type (6) `secret`	string
persistence.secret-files.enabled (5) `true`	boolean
persistence.secret-files.globalMounts[].path (4) `/config/secret`	string
persistence.secret-files.advancedMounts.authelia.app[].path (2) `/app/secrets`	string
persistence.secrets.globalMounts[].path (3) `/config/secrets`	string
persistence.secrets.globalMounts[].readOnly (3) `true`	boolean
persistence.secrets.name (3) `authelia`	string
persistence.secrets.type (3) `secret`	string
persistence.secrets.enabled (1) `true`	boolean
persistence.clients.globalMounts[].path (2) `/secrets/clients.yml`	string
persistence.clients.globalMounts[].subPath (2) `clients.yml`	string
persistence.clients.name (2) `authelia-secret`	string
persistence.clients.type (2) `secret`	string
persistence.data.existingClaim (2) `${PVC_NAME}`	string
persistence.data.globalMounts[].path (1) `/data`	string
persistence.jwks.globalMounts[].path (2) `/secrets/jwks.yml`	string
persistence.jwks.globalMounts[].subPath (2) `jwks.yml`	string
persistence.jwks.name (2) `authelia-secret`	string
persistence.jwks.type (2) `secret`	string
persistence.tmp.globalMounts[].path (2) `/tmp`	string
persistence.tmp.type (2) `emptyDir`	string
persistence.trusted-certs.advancedMounts.authelia.app[].path (2) `/trusted_certs/letsencrypt-certs.pem`	string
persistence.trusted-certs.advancedMounts.authelia.app[].readOnly (2) `true`	boolean
persistence.trusted-certs.advancedMounts.authelia.app[].subPath (2) `letsencrypt-certs.pem`	string
persistence.trusted-certs.name (2) `letsencrypt-certs`	string
persistence.trusted-certs.type (2) `configMap`	string
persistence.dbsecret.globalMounts[].path (1) `/config/pgsqlsecret`	string
persistence.dbsecret.globalMounts[].readOnly (1) `true`	boolean
persistence.dbsecret.name (1) `pgsql-authelia`	string
persistence.dbsecret.type (1) `secret`	string
persistence.oidc-cert.globalMounts[].path (1) `/secrets/oidc`	string
persistence.oidc-cert.name (1) `authelia-oidc-tls`	string
persistence.oidc-cert.type (1) `secret`	string
persistence.secret-keys.enabled (1) `true`	boolean
persistence.secret-keys.globalMounts[].path (1) `/config/secret`	string
persistence.secret-keys.name (1) `authelia-secret-keys`	string
persistence.secret-keys.type (1) `secret`	string
persistence.users.globalMounts[].path (1) `/config/users.yaml`	string
persistence.users.globalMounts[].readOnly (1) `true`	boolean
persistence.users.globalMounts[].subPath (1) `users.yaml`	string
persistence.users.name (1) `authelia-users`	string
persistence.users.type (1) `secret`	string
controllers.authelia.containers.app.image.repository (21) `ghcr.io/authelia/authelia`	string
controllers.authelia.containers.app.image.tag (21) `4.39.19@sha256:0c824dcab1ae97c56bf673c5e77fe8cc6bcd400564555140cc8002a12c6b6463`	string
controllers.authelia.containers.app.probes.liveness.enabled (21) `true`	boolean
controllers.authelia.containers.app.probes.liveness.custom (20) `true`	boolean
controllers.authelia.containers.app.probes.liveness.spec.failureThreshold (20) `3`	number
controllers.authelia.containers.app.probes.liveness.spec.httpGet.path (20) `/api/health`	string
controllers.authelia.containers.app.probes.liveness.spec.httpGet.port (20) `80`	number
controllers.authelia.containers.app.probes.liveness.spec.initialDelaySeconds (20) `0`	number
controllers.authelia.containers.app.probes.liveness.spec.periodSeconds (20) `10`	number
controllers.authelia.containers.app.probes.liveness.spec.timeoutSeconds (20) `1`	number
controllers.authelia.containers.app.probes.readiness.enabled (21) `true`	boolean
controllers.authelia.containers.app.probes.readiness.custom (20) `true`	boolean
controllers.authelia.containers.app.probes.readiness.spec.failureThreshold (20) `3`	number
controllers.authelia.containers.app.probes.readiness.spec.httpGet.path (20) `/api/health`	string
controllers.authelia.containers.app.probes.readiness.spec.httpGet.port (20) `80`	number
controllers.authelia.containers.app.probes.readiness.spec.initialDelaySeconds (20) `0`	number
controllers.authelia.containers.app.probes.readiness.spec.periodSeconds (20) `10`	number
controllers.authelia.containers.app.probes.readiness.spec.timeoutSeconds (20) `1`	number
controllers.authelia.containers.app.probes.startup.enabled (9) `false`	boolean
controllers.authelia.containers.app.probes.startup.custom (2) `true`	boolean
controllers.authelia.containers.app.probes.startup.spec.failureThreshold (2) `60`	number
controllers.authelia.containers.app.probes.startup.spec.httpGet.path (2) `/api/health`	string
controllers.authelia.containers.app.probes.startup.spec.httpGet.port (2) `9091`	number
controllers.authelia.containers.app.probes.startup.spec.initialDelaySeconds (2) `0`	number
controllers.authelia.containers.app.probes.startup.spec.periodSeconds (2) `5`	number
controllers.authelia.containers.app.probes.startup.spec.timeoutSeconds (2) `2`	number
controllers.authelia.containers.app.resources.limits.memory (21) `128Mi`	string
controllers.authelia.containers.app.resources.requests.cpu (21) `10m`	string
controllers.authelia.containers.app.resources.requests.memory (17) `32Mi`	string
controllers.authelia.containers.app.envFrom[].secretRef.name (19) `authelia-secret`	string
controllers.authelia.containers.app.env.AUTHELIA_SERVER_DISABLE_HEALTHCHECK (16) `true`	string, boolean
controllers.authelia.containers.app.env.AUTHELIA_TELEMETRY_METRICS_ADDRESS (16) `tcp://0.0.0.0:8080`	string
controllers.authelia.containers.app.env.AUTHELIA_TELEMETRY_METRICS_ENABLED (15) `true`	string, boolean
controllers.authelia.containers.app.env.AUTHELIA_THEME (15) `dark`	string
controllers.authelia.containers.app.env.AUTHELIA_SERVER_ADDRESS (14) `tcp://0.0.0.0:80`	string
controllers.authelia.containers.app.env.X_AUTHELIA_CONFIG (14) `/config/configuration.yaml`	string
controllers.authelia.containers.app.env.X_AUTHELIA_CONFIG_FILTERS (14) `template`	string
controllers.authelia.containers.app.env.AUTHELIA_LOG_LEVEL (5) `debug`	string
controllers.authelia.containers.app.env.AUTHELIA_NOTIFIER_DISABLE_STARTUP_CHECK (4) `true`	string
controllers.authelia.containers.app.env.AUTHELIA_TOTP_ISSUER (4) `authelia.com`	string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_GROUPS_DN (3) `ou=groups`	string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_USERS_DN (3) `ou=people`	string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_BASE_DN (3) `dc=home,dc=arpa`	string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUPS_FILTER (3) `(member={dn})`	string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_IMPLEMENTATION (3) `custom`	string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PASSWORD_FILE (3) `/app/secrets/AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PASSWORD`	string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_START_TLS (3) `false`	string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TIMEOUT (3) `5s`	string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USER.secretKeyRef.key (1) `AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USER`	string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USER.secretKeyRef.name (1) `authelia-file-secret`	string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USER (3) `uid=admin,ou=people,dc=home,dc=arpa`	string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERS_FILTER (3) `(&({username_attribute}={input})(objectClass=person))`	string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_PASSWORD_RESET_DISABLE (3) `true`	string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_REFRESH_INTERVAL (3) `1m`	string
controllers.authelia.containers.app.env.AUTHELIA_DUO_API_DISABLE (3) `true`	string
controllers.authelia.containers.app.env.AUTHELIA_NOTIFIER_SMTP_ADDRESS (3) `maddy.default.svc.cluster.local:25`	string
controllers.authelia.containers.app.env.AUTHELIA_NOTIFIER_SMTP_DISABLE_REQUIRE_TLS (3) `true`	string
controllers.authelia.containers.app.env.AUTHELIA_NOTIFIER_SMTP_SENDER (3) `Authelia <${SECRET_SMTP_FROM}>`	string
controllers.authelia.containers.app.env.AUTHELIA_SERVER_PORT (3) `80`	number
controllers.authelia.containers.app.env.AUTHELIA_SESSION_SECRET_FILE (3) `/app/secrets/AUTHELIA_SESSION_SECRET`	string
controllers.authelia.containers.app.env.AUTHELIA_STORAGE_ENCRYPTION_KEY_FILE (3) `/app/secrets/AUTHELIA_STORAGE_ENCRYPTION_KEY`	string
controllers.authelia.containers.app.env.TZ (3) `${TIMEZONE}`	string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDRESS (2) `ldap://glauth.auth.svc.cluster.local:389`	string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_DISPLAY_NAME (2) `givenName`	string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_GROUP_NAME (2) `ou`	string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_MAIL (2) `mail`	string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_USERNAME (2) `uid`	string
controllers.authelia.containers.app.env.AUTHELIA_CERTIFICATES_DIRECTORY (2) `/trusted_certs`	string
controllers.authelia.containers.app.env.AUTHELIA_DUO_API_INTEGRATION_KEY_FILE (2) `/app/secrets/AUTHELIA_DUO_API_INTEGRATION_KEY`	string
controllers.authelia.containers.app.env.AUTHELIA_DUO_API_SECRET_KEY_FILE (2) `/app/secrets/AUTHELIA_DUO_API_SECRET_KEY`	string
controllers.authelia.containers.app.env.AUTHELIA_IDENTITY_PROVIDERS_OIDC_HMAC_SECRET_FILE (2) `/app/secrets/AUTHELIA_IDENTITY_PROVIDERS_OIDC_HMAC_SECRET`	string
controllers.authelia.containers.app.env.AUTHELIA_NOTIFIER_SMTP_PASSWORD_FILE (2) `/app/secrets/AUTHELIA_NOTIFIER_SMTP_PASSWORD`	string
controllers.authelia.containers.app.env.AUTHELIA_SESSION_REDIS_DATABASE_INDEX (2) `2`	number
controllers.authelia.containers.app.env.AUTHELIA_SESSION_REDIS_HOST (2) `dragonfly.database.svc.cluster.local`	string
controllers.authelia.containers.app.env.AUTHELIA_STORAGE_POSTGRES_ADDRESS.valueFrom.secretKeyRef.key (1) `host`	string
controllers.authelia.containers.app.env.AUTHELIA_STORAGE_POSTGRES_ADDRESS.valueFrom.secretKeyRef.name (1) `authelia-pguser-secret`	string
controllers.authelia.containers.app.env.AUTHELIA_STORAGE_POSTGRES_ADDRESS (2) `postgres16-rw.database.svc.cluster.local`	string
controllers.authelia.containers.app.env.AUTHELIA_STORAGE_POSTGRES_DATABASE.valueFrom.secretKeyRef.key (1) `db`	string
controllers.authelia.containers.app.env.AUTHELIA_STORAGE_POSTGRES_DATABASE.valueFrom.secretKeyRef.name (1) `authelia-pguser-secret`	string
controllers.authelia.containers.app.env.AUTHELIA_STORAGE_POSTGRES_DATABASE (2) `authelia`	string
controllers.authelia.containers.app.env.AUTHELIA_STORAGE_POSTGRES_PASSWORD_FILE (2) `/app/secrets/AUTHELIA_STORAGE_POSTGRES_PASSWORD`	string
controllers.authelia.containers.app.env.AUTHELIA_STORAGE_POSTGRES_PASSWORD.valueFrom.secretKeyRef.key (2) `password`	string
controllers.authelia.containers.app.env.AUTHELIA_STORAGE_POSTGRES_PASSWORD.valueFrom.secretKeyRef.name (2) `authelia-pguser-authelia`	string
controllers.authelia.containers.app.env.AUTHELIA_WEBAUTHN_DISABLE (2) `true`	string
controllers.authelia.containers.app.env.AUTHELIA_ACCESS_CONTROL_DEFAULT_POLICY (1) `one_factor`	string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_MEMBER_OF (1) `memberOf`	string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_DISPLAY_NAME_ATTRIBUTE (1) `displayName`	string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUP_NAME_ATTRIBUTE (1) `cn`	string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_MAIL_ATTRIBUTE (1) `mail`	string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_URL (1) `ldap://lldap.default.svc.cluster.local:389`	string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERNAME_ATTRIBUTE (1) `uid`	string
controllers.authelia.containers.app.env.AUTHELIA_DEFAULT_REDIRECTION_URL (1) `https://auth.${SECRET_DOMAIN}`	string
controllers.authelia.containers.app.env.AUTHELIA_IDENTITY_VALIDATION_RESET_PASSWORD_JWT_SECRET_FILE (1) `/config/secrets/AUTHELIA_JWT_SECRET`	string
controllers.authelia.containers.app.env.AUTHELIA_NOTIFIER_SMTP_HOST (1) `${SECRET_MAIL_HOST}`	string
controllers.authelia.containers.app.env.AUTHELIA_NOTIFIER_SMTP_PORT (1) `${SECRET_MAIL_PORT}`	string
controllers.authelia.containers.app.env.AUTHELIA_SESSION_DOMAIN (1) `${SECRET_DOMAIN}`	string
controllers.authelia.containers.app.env.AUTHELIA_SESSION_NAME (1) `authelia-home-cluster`	string
controllers.authelia.containers.app.env.AUTHELIA_SESSION_REDIS_PASSWORD.valueFrom.secretKeyRef.key (1) `password`	string
controllers.authelia.containers.app.env.AUTHELIA_SESSION_REDIS_PASSWORD.valueFrom.secretKeyRef.name (1) `dragonfly-secret`	string
controllers.authelia.containers.app.env.AUTHELIA_SESSION_REDIS_PORT (1) `6379`	number
controllers.authelia.containers.app.env.AUTHELIA_STORAGE_POSTGRES_USERNAME.valueFrom.secretKeyRef.key (1) `user`	string
controllers.authelia.containers.app.env.AUTHELIA_STORAGE_POSTGRES_USERNAME.valueFrom.secretKeyRef.name (1) `authelia-pguser-secret`	string
controllers.authelia.containers.app.env.AUTHELIA_STORAGE_POSTGRES_USERNAME (1) `authelia`	string
controllers.authelia.containers.app.env.AUTHELIA_TOTP_DISABLE (1) `false`	boolean
controllers.authelia.containers.app.env.AUTHELIA_WEBAUTHN_ENABLE_PASSKEY_LOGIN (1) `true`	string
controllers.authelia.containers.app.env.AUTHELIA_WEBAUTHN_EXPERIMENTAL_ENABLE_PASSKEY_UV_TWO_FACTORS (1) `true`	string
controllers.authelia.containers.app.env.AUTHELIA_WEBAUTHN_SELECTION_CRITERIA_DISCOVERABILITY (1) `required`	string
controllers.authelia.containers.app.env.AUTHELIA_WEBAUTHN_SELECTION_CRITERIA_USER_VERIFICATION (1) `required`	string
controllers.authelia.containers.app.env.CLUSTER_CIDR (1) `${CLUSTER_CIDR}`	string
controllers.authelia.containers.app.env.HOME_CIDR (1) `${HOME_CIDR}`	string
controllers.authelia.containers.app.env.NODE_CIDR (1) `${NODE_CIDR}`	string
controllers.authelia.containers.app.env.SECRET_DOMAIN (1) `${SECRET_DOMAIN}`	string
controllers.authelia.containers.app.env.SECRET_EXTERNAL_DOMAIN (1) `${SECRET_EXTERNAL_DOMAIN}`	string
controllers.authelia.containers.app.env.SECRET_INTERNAL_DOMAIN (1) `${SECRET_INTERNAL_DOMAIN}`	string
controllers.authelia.containers.app.env.SECRET_PUBLIC_DOMAIN (1) `${SECRET_PUBLIC_DOMAIN}`	string
controllers.authelia.containers.app.securityContext.allowPrivilegeEscalation (15) `false`	boolean
controllers.authelia.containers.app.securityContext.capabilities.drop[] (15) `- ALL`	string
controllers.authelia.containers.app.securityContext.readOnlyRootFilesystem (15) `true`	boolean
controllers.authelia.containers.app.args[] (6) `- --config - /config/configuration.yml,/secrets/jwks.yml,/secrets/clients.yml`	string
controllers.authelia.containers.anubis.env.BIND (1) `:8923`	string
controllers.authelia.containers.anubis.env.DIFFICULTY (1) `4`	string
controllers.authelia.containers.anubis.env.ED25519_PRIVATE_KEY_HEX.valueFrom.secretKeyRef.key (1) `ED25519_PRIVATE_KEY_HEX`	string
controllers.authelia.containers.anubis.env.ED25519_PRIVATE_KEY_HEX.valueFrom.secretKeyRef.name (1) `anubis-key-authelia`	string
controllers.authelia.containers.anubis.env.SERVE_ROBOTS_TXT (1) `true`	string
controllers.authelia.containers.anubis.env.TARGET (1) `http://localhost:80`	string
controllers.authelia.containers.anubis.env.TZ (1) `${TIMEZONE}`	string
controllers.authelia.containers.anubis.image.repository (1) `ghcr.io/techarohq/anubis`	string
controllers.authelia.containers.anubis.image.tag (1) `v1.25.0`	string
controllers.authelia.containers.anubis.ports[].containerPort (1) `80 8080 8923`	number
controllers.authelia.containers.anubis.ports[].name (1) `authelia metrics anubis`	string
controllers.authelia.containers.anubis.resources.limits.memory (1) `256Mi`	string
controllers.authelia.containers.anubis.resources.requests.cpu (1) `26m`	string
controllers.authelia.containers.anubis.resources.requests.memory (1) `256Mi`	string
controllers.authelia.containers.anubis.securityContext.allowPrivilegeEscalation (1) `false`	boolean
controllers.authelia.containers.anubis.securityContext.capabilities.drop[] (1) `- ALL`	string
controllers.authelia.containers.anubis.securityContext.readOnlyRootFilesystem (1) `true`	boolean
controllers.authelia.containers.authelia.env.AUTHELIA_SERVER_ADDRESS (1) `tcp://:80`	string
controllers.authelia.containers.authelia.env.AUTHELIA_SERVER_DISABLE_HEALTHCHECK (1) `true`	string
controllers.authelia.containers.authelia.env.AUTHELIA_TELEMETRY_METRICS_ADDRESS (1) `tcp://0.0.0.0:8080`	string
controllers.authelia.containers.authelia.env.AUTHELIA_TELEMETRY_METRICS_ENABLED (1) `true`	string
controllers.authelia.containers.authelia.env.AUTHELIA_THEME (1) `dark`	string
controllers.authelia.containers.authelia.env.X_AUTHELIA_CONFIG (1) `/config/configuration.yaml`	string
controllers.authelia.containers.authelia.env.X_AUTHELIA_CONFIG_FILTERS (1) `template`	string
controllers.authelia.containers.authelia.envFrom[].secretRef.name (1) `authelia-secret`	string
controllers.authelia.containers.authelia.image.repository (1) `ghcr.io/authelia/authelia`	string
controllers.authelia.containers.authelia.image.tag (1) `4.39.19`	string
controllers.authelia.containers.authelia.probes.liveness.custom (1) `true`	boolean
controllers.authelia.containers.authelia.probes.liveness.enabled (1) `true`	boolean
controllers.authelia.containers.authelia.probes.liveness.spec.failureThreshold (1) `3`	number
controllers.authelia.containers.authelia.probes.liveness.spec.httpGet.path (1) `/api/health`	string
controllers.authelia.containers.authelia.probes.liveness.spec.httpGet.port (1) `80`	number
controllers.authelia.containers.authelia.probes.liveness.spec.initialDelaySeconds (1) `0`	number
controllers.authelia.containers.authelia.probes.liveness.spec.periodSeconds (1) `10`	number
controllers.authelia.containers.authelia.probes.liveness.spec.timeoutSeconds (1) `1`	number
controllers.authelia.containers.authelia.probes.readiness.custom (1) `true`	boolean
controllers.authelia.containers.authelia.probes.readiness.enabled (1) `true`	boolean
controllers.authelia.containers.authelia.probes.readiness.spec.failureThreshold (1) `3`	number
controllers.authelia.containers.authelia.probes.readiness.spec.httpGet.path (1) `/api/health`	string
controllers.authelia.containers.authelia.probes.readiness.spec.httpGet.port (1) `80`	number
controllers.authelia.containers.authelia.probes.readiness.spec.initialDelaySeconds (1) `0`	number
controllers.authelia.containers.authelia.probes.readiness.spec.periodSeconds (1) `10`	number
controllers.authelia.containers.authelia.probes.readiness.spec.timeoutSeconds (1) `1`	number
controllers.authelia.containers.authelia.resources.limits.memory (1) `42Mi`	string
controllers.authelia.containers.authelia.resources.requests.cpu (1) `10m`	string
controllers.authelia.containers.authelia.resources.requests.memory (1) `42Mi`	string
controllers.authelia.containers.authelia.securityContext.allowPrivilegeEscalation (1) `false`	boolean
controllers.authelia.containers.authelia.securityContext.capabilities.drop[] (1) `- ALL`	string
controllers.authelia.containers.authelia.securityContext.readOnlyRootFilesystem (1) `true`	boolean
controllers.authelia.annotations."reloader.stakater.com/auto" (20) `true`	string
controllers.authelia.annotations."configmap.reloader.stakater.com/reload" (1) `authelia`	string
controllers.authelia.annotations."secret.reloader.stakater.com/reload" (1) `authelia,authelia-files`	string
controllers.authelia.replicas (17) `2`	number
controllers.authelia.strategy (17) `RollingUpdate`	string
controllers.authelia.initContainers.init-db.image.repository (11) `ghcr.io/home-operations/postgres-init`	string
controllers.authelia.initContainers.init-db.image.tag (11) `17.4`	number, string
controllers.authelia.initContainers.init-db.image.pullPolicy (3) `IfNotPresent`	string
controllers.authelia.initContainers.init-db.envFrom[].secretRef.name (10) `authelia-secret`	string
controllers.authelia.initContainers.init-db.env.INIT_POSTGRES_DBNAME (1) `authelia`	string
controllers.authelia.initContainers.init-db.env.INIT_POSTGRES_HOST (1) `postgres16-rw.database.svc.cluster.local`	string
controllers.authelia.initContainers.init-db.env.INIT_POSTGRES_PASS.valueFrom.secretKeyRef.key (1) `AUTHELIA_STORAGE_POSTGRES_PASSWORD`	string
controllers.authelia.initContainers.init-db.env.INIT_POSTGRES_PASS.valueFrom.secretKeyRef.name (1) `authelia-secret`	string
controllers.authelia.initContainers.init-db.env.INIT_POSTGRES_SUPER_PASS.valueFrom.secretKeyRef.key (1) `password`	string
controllers.authelia.initContainers.init-db.env.INIT_POSTGRES_SUPER_PASS.valueFrom.secretKeyRef.name (1) `cloudnative-pg-secret`	string
controllers.authelia.initContainers.init-db.env.INIT_POSTGRES_USER.valueFrom.secretKeyRef.key (1) `AUTHELIA_STORAGE_POSTGRES_USERNAME`	string
controllers.authelia.initContainers.init-db.env.INIT_POSTGRES_USER.valueFrom.secretKeyRef.name (1) `authelia-secret`	string
controllers.authelia.initContainers.01-init-db.envFrom[].secretRef.name (3) `authelia-secret`	string
controllers.authelia.initContainers.01-init-db.image.repository (3) `ghcr.io/home-operations/postgres-init`	string
controllers.authelia.initContainers.01-init-db.image.tag (3) `18`	string, number
controllers.authelia.pod.securityContext.runAsGroup (8) `568`	number
controllers.authelia.pod.securityContext.runAsUser (8) `568`	number
controllers.authelia.pod.securityContext.runAsNonRoot (7) `true`	boolean
controllers.authelia.pod.securityContext.seccompProfile.type (2) `RuntimeDefault`	string
controllers.authelia.pod.securityContext.fsGroup (1) `10000`	number
controllers.authelia.pod.securityContext.fsGroupChangePolicy (1) `OnRootMismatch`	string
controllers.authelia.pod.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (5) `authelia`	string
controllers.authelia.pod.topologySpreadConstraints[].maxSkew (5) `1`	number
controllers.authelia.pod.topologySpreadConstraints[].topologyKey (5) `kubernetes.io/hostname`	string
controllers.authelia.pod.topologySpreadConstraints[].whenUnsatisfiable (5) `DoNotSchedule`	string
controllers.authelia.pod.enableServiceLinks (2) `false`	boolean
controllers.authelia.labels.postgres (2) `true`	string
controllers.authelia.type (2) `deployment`	string
controllers.main.annotations."reloader.stakater.com/auto" (1) `true`	string
controllers.main.containers.main.env.AUTHELIA_SERVER_ADDRESS (1) `tcp://0.0.0.0:9191`	string
controllers.main.containers.main.env.AUTHELIA_TELEMETRY_METRICS_ADDRESS (1) `tcp://0.0.0.0:9959`	string
controllers.main.containers.main.env.X_AUTHELIA_CONFIG (1) `/config/configuration.yaml`	string
controllers.main.containers.main.env.X_AUTHELIA_CONFIG_FILTERS (1) `template`	string
controllers.main.containers.main.image.repository (1) `ghcr.io/authelia/authelia`	string
controllers.main.containers.main.image.tag (1) `4.39.19@sha256:0c824dcab1ae97c56bf673c5e77fe8cc6bcd400564555140cc8002a12c6b6463`	string
controllers.main.containers.main.probes.liveness.custom (1) `true`	boolean
controllers.main.containers.main.probes.liveness.enabled (1) `true`	boolean
controllers.main.containers.main.probes.liveness.spec.failureThreshold (1) `3`	number
controllers.main.containers.main.probes.liveness.spec.httpGet.path (1) `/api/health`	string
controllers.main.containers.main.probes.liveness.spec.httpGet.port (1) `9191`	number
controllers.main.containers.main.probes.liveness.spec.initialDelaySeconds (1) `0`	number
controllers.main.containers.main.probes.liveness.spec.periodSeconds (1) `10`	number
controllers.main.containers.main.probes.liveness.spec.timeoutSeconds (1) `1`	number
controllers.main.containers.main.probes.readiness.custom (1) `true`	boolean
controllers.main.containers.main.probes.readiness.enabled (1) `true`	boolean
controllers.main.containers.main.probes.readiness.spec.failureThreshold (1) `3`	number
controllers.main.containers.main.probes.readiness.spec.httpGet.path (1) `/api/health`	string
controllers.main.containers.main.probes.readiness.spec.httpGet.port (1) `9191`	number
controllers.main.containers.main.probes.readiness.spec.initialDelaySeconds (1) `0`	number
controllers.main.containers.main.probes.readiness.spec.periodSeconds (1) `10`	number
controllers.main.containers.main.probes.readiness.spec.timeoutSeconds (1) `1`	number
controllers.main.containers.main.probes.startup.enabled (1) `false`	boolean
controllers.main.containers.main.resources.limits.memory (1) `200Mi`	string
controllers.main.containers.main.resources.requests.cpu (1) `5m`	string
controllers.main.containers.main.resources.requests.memory (1) `10Mi`	string
controllers.main.initContainers.01-init-db.env.INIT_POSTGRES_DBNAME (1) `authelia`	string
controllers.main.initContainers.01-init-db.env.INIT_POSTGRES_HOST (1) `postgres-lb.storage.svc.cluster.local`	string
controllers.main.initContainers.01-init-db.env.INIT_POSTGRES_PASS (1) `${AUTHELIA_STORAGE_POSTGRES_PASSWORD}`	string
controllers.main.initContainers.01-init-db.env.INIT_POSTGRES_SUPER_PASS (1) `${POSTGRES_SUPER_PASS}`	string
controllers.main.initContainers.01-init-db.env.INIT_POSTGRES_USER (1) `${AUTHELIA_STORAGE_POSTGRES_USERNAME}`	string
controllers.main.initContainers.01-init-db.image.pullPolicy (1) `IfNotPresent`	string
controllers.main.initContainers.01-init-db.image.repository (1) `ghcr.io/home-operations/postgres-init`	string
controllers.main.initContainers.01-init-db.image.tag (1) `18`	number
controllers.main.pod.enableServiceLinks (1) `false`	boolean
controllers.main.pod.securityContext.fsGroup (1) `568`	number
controllers.main.pod.securityContext.fsGroupChangePolicy (1) `OnRootMismatch`	string
controllers.main.pod.securityContext.runAsGroup (1) `568`	number
controllers.main.pod.securityContext.runAsUser (1) `568`	number
controllers.main.pod.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (1) `authelia`	string
controllers.main.pod.topologySpreadConstraints[].maxSkew (1) `1`	number
controllers.main.pod.topologySpreadConstraints[].topologyKey (1) `kubernetes.io/hostname`	string
controllers.main.pod.topologySpreadConstraints[].whenUnsatisfiable (1) `DoNotSchedule`	string
controllers.main.replicas (1) `2`	number
controllers.main.strategy (1) `RollingUpdate`	string
service.app.ports.http.port (21) `80`	number
service.app.ports.http.primary (4) `true`	boolean
service.app.ports.http.protocol (1) `HTTP`	string
service.app.ports.metrics.port (20) `8080`	number
service.app.ports.metrics.enabled (3) `true`	boolean
service.app.ports.metrics.protocol (1) `HTTP`	string
service.app.controller (18) `authelia`	string
service.app.ipFamilyPolicy (3) `PreferDualStack`	string
service.main.ports.http.port (2) `80`	number
service.main.ports.metrics.enabled (2) `true`	boolean
service.main.ports.metrics.port (2) `8080`	number
service.main.controller (1) `main`	string
service.authelia.controller (1) `authelia`	string
service.authelia.ports.anubis.port (1) `8923`	number
service.authelia.ports.http.port (1) `80`	number
service.authelia.ports.metrics.port (1) `8080`	number
serviceMonitor.app.endpoints[].port (19) `metrics`	string
serviceMonitor.app.endpoints[].path (15) `/metrics`	string
serviceMonitor.app.endpoints[].interval (14) `1m`	string
serviceMonitor.app.endpoints[].scheme (14) `http`	string
serviceMonitor.app.endpoints[].scrapeTimeout (14) `10s`	string
serviceMonitor.app.serviceName (18) `authelia`	string
serviceMonitor.app.enabled (5) `true`	boolean
serviceMonitor.main.enabled (1) `true`	boolean
serviceMonitor.main.endpoints[].interval (1) `1m`	string
serviceMonitor.main.endpoints[].path (1) `/metrics`	string
serviceMonitor.main.endpoints[].port (1) `metrics`	string
serviceMonitor.main.endpoints[].scheme (1) `http`	string
serviceMonitor.main.endpoints[].scrapeTimeout (1) `10s`	string
serviceMonitor.main.serviceName (1) `authelia`	string
route.app.hostnames[] (15) `- auth.${SECRET_DOMAIN}`	string
route.app.parentRefs[].name (15) `envoy-external`	string
route.app.parentRefs[].namespace (15) `network`	string
route.app.parentRefs[].sectionName (10) `https`	string
route.app.rules[].backendRefs[].port (10) `80`	number, string
route.app.rules[].backendRefs[].identifier (6) `app`	string
route.app.rules[].backendRefs[].name (4) `authelia`	string
route.app.rules[].filters[].type (2) `ResponseHeaderModifier`	string
route.app.rules[].filters[].requestHeaderModifier.set[].name (1) `Cache-Control Pragma X-Frame-Options X-XSS-Protection`	string
route.app.rules[].filters[].requestHeaderModifier.set[].value (1) `no-store no-cache SAMEORIGIN 1; mode=block`	string
route.app.rules[].filters[].responseHeaderModifier.set[].name (1) `X-Frame-Options X-XSS-Protection Cache-Control Pragma`	string
route.app.rules[].filters[].responseHeaderModifier.set[].value (1) `SAMEORIGIN 1; mode=block no-store no-cache`	string
route.app.annotations."gatus.home-operations.com/endpoint" (2) `name: Authelia`	string
route.app.annotations."gethomepage.dev/description" (2) `Open-source authentication and authorization server`	string
route.app.annotations."gethomepage.dev/enabled" (2) `true`	string
route.app.annotations."gethomepage.dev/group" (2) `Auth`	string
route.app.annotations."gethomepage.dev/icon" (2) `authelia`	string
route.app.annotations."gethomepage.dev/name" (2) `Authelia`	string
route.app.annotations.glance/icon (2) `https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/png/authelia.png`	string
route.app.annotations.glance/id (2) `Security`	string
route.app.annotations.glance/name (2) `Authelia`	string
route.app.annotations.glance/show (2) `true`	string
route.app.annotations."gatus.home-operations.com/enabled" (1) `true`	string
route.app.annotations."gethomepage.dev/app" (1) `authelia`	string
route.authelia.hostnames[] (1) `- auth.${CLUSTER_DOMAIN}`	string
route.authelia.parentRefs[].name (1) `envoy-external`	string
route.authelia.parentRefs[].namespace (1) `network`	string
route.authelia.rules[].backendRefs[].identifier (1) `authelia`	string
route.authelia.rules[].backendRefs[].port (1) `anubis`	string
route.internal.annotations."gatus.home-operations.com/enabled" (1) `true`	string
route.internal.hostnames[] (1) `- auth.${SECRET_DOMAIN}`	string
route.internal.parentRefs[].name (1) `envoy-internal`	string
route.internal.parentRefs[].namespace (1) `network`	string
route.main.annotations."gatus.home-operations.com/endpoint" (1) `group: infrastructure`	string
route.main.annotations."gethomepage.dev/enabled" (1) `true`	string
route.main.annotations."gethomepage.dev/group" (1) `Infra`	string
route.main.annotations."gethomepage.dev/icon" (1) `authelia.svg`	string
route.main.hostnames[] (1) `- auth.${SECRET_DOMAIN} - auth.${SECRET_DOMAIN_TWO}`	string
route.main.parentRefs[].name (1) `envoy-external`	string
route.main.parentRefs[].namespace (1) `network`	string
route.main.parentRefs[].sectionName (1) `https`	string
defaultPodOptions.securityContext.runAsGroup (13) `65534`	number
defaultPodOptions.securityContext.runAsUser (13) `65534`	number
defaultPodOptions.securityContext.runAsNonRoot (12) `true`	boolean
defaultPodOptions.securityContext.fsGroupChangePolicy (5) `OnRootMismatch`	string
defaultPodOptions.securityContext.seccompProfile.type (5) `RuntimeDefault`	string
defaultPodOptions.securityContext.fsGroup (4) `1000`	number
defaultPodOptions.enableServiceLinks (7) `false`	boolean
defaultPodOptions.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (6) `authelia`	string
defaultPodOptions.topologySpreadConstraints[].maxSkew (6) `1`	number
defaultPodOptions.topologySpreadConstraints[].topologyKey (6) `kubernetes.io/hostname`	string
defaultPodOptions.topologySpreadConstraints[].whenUnsatisfiable (6) `DoNotSchedule`	string
defaultPodOptions.automountServiceAccountToken (1) `false`	boolean
defaultPodOptions.hostIPC (1) `false`	boolean
defaultPodOptions.hostNetwork (1) `false`	boolean
defaultPodOptions.hostPID (1) `false`	boolean
defaultPodOptions.shareProcessNamespace (1) `false`	boolean
ingress.app.className (5) `external`	string
ingress.app.hosts[].host (5) `auth.${SECRET_DOMAIN}`	string
ingress.app.hosts[].paths[].path (5) `/`	string
ingress.app.hosts[].paths[].service.identifier (5) `app`	string
ingress.app.hosts[].paths[].service.port (5) `http`	string, number
ingress.app.annotations."external-dns.alpha.kubernetes.io/target" (4) `external.${SECRET_DOMAIN}`	string
ingress.app.annotations."nginx.ingress.kubernetes.io/configuration-snippet" (3) `add_header Cache-Control "no-store"; add_header Pragma "no-cache"; add_header X-Frame-Options "SAMEORIGIN"; add_header X-XSS-Protection "1; mode=block";`	string
ingress.app.annotations."hajimari.io/icon" (2) `mdi:shield-account`	string
ingress.app.annotations."gethomepage.dev/enabled" (1) `true`	string
ingress.app.annotations."gethomepage.dev/group" (1) `Services`	string
ingress.app.annotations."gethomepage.dev/icon" (1) `mdi-two-factor-authentication`	string
ingress.app.annotations."gethomepage.dev/name" (1) `Authelia`	string
ingress.app.annotations."nginx.ingress.kubernetes.io/add-header-Cache-Control" (1) `no-store`	string
ingress.app.annotations."nginx.ingress.kubernetes.io/add-header-Pragma" (1) `no-cache`	string
ingress.app.annotations."nginx.ingress.kubernetes.io/add-header-X-Frame-Options" (1) `SAMEORIGIN`	string
ingress.app.annotations."nginx.ingress.kubernetes.io/add-header-X-XSS-Protection" (1) `1; mode=block`	string
ingress.app.tls[].hosts[] (2) `- auth.${SECRET_DOMAIN}`	string
ingress.app.enabled (1) `true`	boolean
ingress.main.annotations."hajimari.io/icon" (2) `mdi:shield-account`	string
ingress.main.annotations."nginx.ingress.kubernetes.io/configuration-snippet" (2) `add_header Cache-Control "no-store"; add_header Pragma "no-cache"; add_header X-Frame-Options "SAMEORIGIN"; add_header X-XSS-Protection "1; mode=block";`	string
ingress.main.annotations."external-dns.alpha.kubernetes.io/target" (1) `ingress.${ORG_DOMAIN}`	string
ingress.main.annotations."external-dns.home.arpa/enabled" (1) `true`	string
ingress.main.annotations."hajimari.io/enable" (1) `true`	string
ingress.main.annotations."hajimari.io/group" (1) `Authentication`	string
ingress.main.annotations."hajimari.io/name" (1) `Authelia`	string
ingress.main.enabled (2) `true`	boolean
ingress.main.hosts[].host (2) `auth.${ORG_DOMAIN}`	string
ingress.main.hosts[].paths[].path (2) `/`	string
ingress.main.hosts[].paths[].pathType (2) `Prefix`	string
ingress.main.hosts[].paths[].service.identifier (1) `main`	string
ingress.main.hosts[].paths[].service.port (1) `http`	string
ingress.main.className (1) `external`	string
ingress.main.ingressClassName (1) `external`	string
ingress.main.tls[].hosts[] (1) `- auth.${ORG_DOMAIN}`	string
enableServiceLinks (2) `false`	boolean
args[] (1) `- --config - /config/configuration.yaml - --config.experimental.filters - expand-env`	string
controller.annotations."reloader.stakater.com/auto" (1) `true`	string
controller.replicas (1) `2`	number
controller.strategy (1) `RollingUpdate`	string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_GROUPS_DN (1) `ou=groups`	string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_USERS_DN (1) `ou=people`	string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDRESS (1) `ldap://lldap.auth.svc.cluster.local:389`	string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_DISPLAY_NAME (1) `displayName`	string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_GROUP_NAME (1) `cn`	string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_MAIL (1) `mail`	string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_USERNAME (1) `uid`	string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_BASE_DN (1) `dc=home,dc=arpa`	string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUPS_FILTER (1) `(member={dn})`	string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_IMPLEMENTATION (1) `custom`	string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_START_TLS (1) `false`	string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TIMEOUT (1) `5s`	string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USER (1) `uid=admin,ou=people,dc=home,dc=arpa`	string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERS_FILTER (1) `(&({username_attribute}={input})(objectClass=person))`	string
env.AUTHELIA_AUTHENTICATION_BACKEND_PASSWORD_RESET_DISABLE (1) `true`	string
env.AUTHELIA_DEFAULT_REDIRECTION_URL (1) `https://auth.${ORG_DOMAIN}`	string
env.AUTHELIA_DUO_API_DISABLE (1) `true`	string
env.AUTHELIA_LOG_LEVEL (1) `info`	string
env.AUTHELIA_NOTIFIER_DISABLE_STARTUP_CHECK (1) `true`	string
env.AUTHELIA_NOTIFIER_SMTP_SENDER (1) `Authelia <noreply@${NET_DOMAIN}>`	string
env.AUTHELIA_SERVER_ADDRESS (1) `tcp://:80`	string
env.AUTHELIA_SERVER_DISABLE_HEALTHCHECK (1) `true`	string
env.AUTHELIA_SESSION_DOMAIN (1) `${ORG_DOMAIN}`	string
env.AUTHELIA_SESSION_REDIS_DATABASE_INDEX (1) `14`	number
env.AUTHELIA_SESSION_REDIS_HOST (1) `redis.default.svc.cluster.local`	string
env.AUTHELIA_STORAGE_POSTGRES_ADDRESS (1) `postgres.database.svc.cluster.local:5432`	string
env.AUTHELIA_STORAGE_POSTGRES_DATABASE.valueFrom.secretKeyRef.key (1) `DATABASE_NAME`	string
env.AUTHELIA_STORAGE_POSTGRES_DATABASE.valueFrom.secretKeyRef.name (1) `database-authelia-user`	string
env.AUTHELIA_STORAGE_POSTGRES_PASSWORD.valueFrom.secretKeyRef.key (1) `PASSWORD`	string
env.AUTHELIA_STORAGE_POSTGRES_PASSWORD.valueFrom.secretKeyRef.name (1) `database-authelia-user`	string
env.AUTHELIA_STORAGE_POSTGRES_USERNAME.valueFrom.secretKeyRef.key (1) `LOGIN`	string
env.AUTHELIA_STORAGE_POSTGRES_USERNAME.valueFrom.secretKeyRef.name (1) `database-authelia-user`	string
env.AUTHELIA_TELEMETRY_METRICS_ADDRESS (1) `tcp://0.0.0.0:8080`	string
env.AUTHELIA_TELEMETRY_METRICS_ENABLED (1) `true`	string
env.AUTHELIA_THEME (1) `grey`	string
env.AUTHELIA_TOTP_ISSUER (1) `authelia.com`	string
env.AUTHELIA_WEBAUTHN_DISABLE (1) `true`	string
envFrom[].secretRef.name (1) `authelia-secret`	string
image.repository (1) `ghcr.io/authelia/authelia`	string
image.tag (1) `master@sha256:c1a838724e95a3ebc9ca210f0d81fc25a77e47e0b583f146c5781e1701a4199f`	string
podSecurityContext.fsGroup (1) `568`	number
podSecurityContext.fsGroupChangePolicy (1) `OnRootMismatch`	string
podSecurityContext.runAsGroup (1) `568`	number
podSecurityContext.runAsUser (1) `568`	number
probes.liveness.custom (1) `true`	boolean
probes.liveness.enabled (1) `true`	boolean
probes.liveness.spec.failureThreshold (1) `3`	number
probes.liveness.spec.httpGet.path (1) `/api/health`	string
probes.liveness.spec.httpGet.port (1) `80`	number
probes.liveness.spec.initialDelaySeconds (1) `0`	number
probes.liveness.spec.periodSeconds (1) `10`	number
probes.liveness.spec.timeoutSeconds (1) `1`	number
probes.readiness.custom (1) `true`	boolean
probes.readiness.enabled (1) `true`	boolean
probes.readiness.spec.failureThreshold (1) `3`	number
probes.readiness.spec.httpGet.path (1) `/api/health`	string
probes.readiness.spec.httpGet.port (1) `80`	number
probes.readiness.spec.initialDelaySeconds (1) `0`	number
probes.readiness.spec.periodSeconds (1) `10`	number
probes.readiness.spec.timeoutSeconds (1) `1`	number
probes.startup.enabled (1) `false`	boolean
resources.limits.memory (1) `100Mi`	string
resources.requests.cpu (1) `5m`	string
resources.requests.memory (1) `10Mi`	string
topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (1) `authelia`	string
topologySpreadConstraints[].maxSkew (1) `1`	number
topologySpreadConstraints[].topologyKey (1) `kubernetes.io/hostname`	string
topologySpreadConstraints[].whenUnsatisfiable (1) `DoNotSchedule`	string

Key

Types

persistence.config.name (24)

authelia-configmap

string

persistence.config.type (24)

configMap

string

persistence.config.globalMounts[].path (21)

/config/configuration.yaml

string

persistence.config.globalMounts[].subPath (21)

configuration.yaml

string

persistence.config.globalMounts[].readOnly (17)

true

boolean

persistence.config.enabled (10)

true

boolean

persistence.config.advancedMounts.authelia.app[].path (2)

/config/configuration.yaml

string

persistence.config.advancedMounts.authelia.app[].readOnly (2)

true

boolean

persistence.config.advancedMounts.authelia.app[].subPath (2)

configuration.yaml

string

persistence.config.mountPath (1)

/config/configuration.yaml

string

persistence.config.readOnly (1)

false

boolean

persistence.config.subPath (1)

configuration.yaml

string

persistence.secret-files.name (6)

authelia-files

string

persistence.secret-files.type (6)

secret

string

persistence.secret-files.enabled (5)

true

boolean

persistence.secret-files.globalMounts[].path (4)

/config/secret

string

persistence.secret-files.advancedMounts.authelia.app[].path (2)

/app/secrets

string

persistence.secrets.globalMounts[].path (3)

/config/secrets

string

persistence.secrets.globalMounts[].readOnly (3)

true

boolean

persistence.secrets.name (3)

authelia

string

persistence.secrets.type (3)

secret

string

persistence.secrets.enabled (1)

true

boolean

persistence.clients.globalMounts[].path (2)

/secrets/clients.yml

string

persistence.clients.globalMounts[].subPath (2)

clients.yml

string

persistence.clients.name (2)

authelia-secret

string

persistence.clients.type (2)

secret

string

persistence.data.existingClaim (2)

${PVC_NAME}

string

persistence.data.globalMounts[].path (1)

/data

string

persistence.jwks.globalMounts[].path (2)

/secrets/jwks.yml

string

persistence.jwks.globalMounts[].subPath (2)

jwks.yml

string

persistence.jwks.name (2)

authelia-secret

string

persistence.jwks.type (2)

secret

string

persistence.tmp.globalMounts[].path (2)

/tmp

string

persistence.tmp.type (2)

emptyDir

string

persistence.trusted-certs.advancedMounts.authelia.app[].path (2)

/trusted_certs/letsencrypt-certs.pem

string

persistence.trusted-certs.advancedMounts.authelia.app[].readOnly (2)

true

boolean

persistence.trusted-certs.advancedMounts.authelia.app[].subPath (2)

letsencrypt-certs.pem

string

persistence.trusted-certs.name (2)

letsencrypt-certs

string

persistence.trusted-certs.type (2)

configMap

string

persistence.dbsecret.globalMounts[].path (1)

/config/pgsqlsecret

string

persistence.dbsecret.globalMounts[].readOnly (1)

true

boolean

persistence.dbsecret.name (1)

pgsql-authelia

string

persistence.dbsecret.type (1)

secret

string

persistence.oidc-cert.globalMounts[].path (1)

/secrets/oidc

string

persistence.oidc-cert.name (1)

authelia-oidc-tls

string

persistence.oidc-cert.type (1)

secret

string

persistence.secret-keys.enabled (1)

true

boolean

persistence.secret-keys.globalMounts[].path (1)

/config/secret

string

persistence.secret-keys.name (1)

authelia-secret-keys

string

persistence.secret-keys.type (1)

secret

string

persistence.users.globalMounts[].path (1)

/config/users.yaml

string

persistence.users.globalMounts[].readOnly (1)

true

boolean

persistence.users.globalMounts[].subPath (1)

users.yaml

string

persistence.users.name (1)

authelia-users

string

persistence.users.type (1)

secret

string

controllers.authelia.containers.app.image.repository (21)

ghcr.io/authelia/authelia

string

controllers.authelia.containers.app.image.tag (21)

4.39.19@sha256:0c824dcab1ae97c56bf673c5e77fe8cc6bcd400564555140cc8002a12c6b6463

string

controllers.authelia.containers.app.probes.liveness.enabled (21)

true

boolean

controllers.authelia.containers.app.probes.liveness.custom (20)

true

boolean

controllers.authelia.containers.app.probes.liveness.spec.failureThreshold (20)

number

controllers.authelia.containers.app.probes.liveness.spec.httpGet.path (20)

/api/health

string

controllers.authelia.containers.app.probes.liveness.spec.httpGet.port (20)

number

controllers.authelia.containers.app.probes.liveness.spec.initialDelaySeconds (20)

number

controllers.authelia.containers.app.probes.liveness.spec.periodSeconds (20)

number

controllers.authelia.containers.app.probes.liveness.spec.timeoutSeconds (20)

number

controllers.authelia.containers.app.probes.readiness.enabled (21)

true

boolean

controllers.authelia.containers.app.probes.readiness.custom (20)

true

boolean

controllers.authelia.containers.app.probes.readiness.spec.failureThreshold (20)

number

controllers.authelia.containers.app.probes.readiness.spec.httpGet.path (20)

/api/health

string

controllers.authelia.containers.app.probes.readiness.spec.httpGet.port (20)

number

controllers.authelia.containers.app.probes.readiness.spec.initialDelaySeconds (20)

number

controllers.authelia.containers.app.probes.readiness.spec.periodSeconds (20)

number

controllers.authelia.containers.app.probes.readiness.spec.timeoutSeconds (20)

number

controllers.authelia.containers.app.probes.startup.enabled (9)

false

boolean

controllers.authelia.containers.app.probes.startup.custom (2)

true

boolean

controllers.authelia.containers.app.probes.startup.spec.failureThreshold (2)

number

controllers.authelia.containers.app.probes.startup.spec.httpGet.path (2)

/api/health

string

controllers.authelia.containers.app.probes.startup.spec.httpGet.port (2)

number

controllers.authelia.containers.app.probes.startup.spec.initialDelaySeconds (2)

number

controllers.authelia.containers.app.probes.startup.spec.periodSeconds (2)

number

controllers.authelia.containers.app.probes.startup.spec.timeoutSeconds (2)

number

controllers.authelia.containers.app.resources.limits.memory (21)

128Mi

string

controllers.authelia.containers.app.resources.requests.cpu (21)

10m

string

controllers.authelia.containers.app.resources.requests.memory (17)

32Mi

string

controllers.authelia.containers.app.envFrom[].secretRef.name (19)

authelia-secret

string

controllers.authelia.containers.app.env.AUTHELIA_SERVER_DISABLE_HEALTHCHECK (16)

true

string, boolean

controllers.authelia.containers.app.env.AUTHELIA_TELEMETRY_METRICS_ADDRESS (16)

tcp://0.0.0.0:8080

string

controllers.authelia.containers.app.env.AUTHELIA_TELEMETRY_METRICS_ENABLED (15)

true

string, boolean

controllers.authelia.containers.app.env.AUTHELIA_THEME (15)

dark

string

controllers.authelia.containers.app.env.AUTHELIA_SERVER_ADDRESS (14)

tcp://0.0.0.0:80

string

controllers.authelia.containers.app.env.X_AUTHELIA_CONFIG (14)

/config/configuration.yaml

string

controllers.authelia.containers.app.env.X_AUTHELIA_CONFIG_FILTERS (14)

template

string

controllers.authelia.containers.app.env.AUTHELIA_LOG_LEVEL (5)

debug

string

controllers.authelia.containers.app.env.AUTHELIA_NOTIFIER_DISABLE_STARTUP_CHECK (4)

true

string

controllers.authelia.containers.app.env.AUTHELIA_TOTP_ISSUER (4)

authelia.com

string

controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_GROUPS_DN (3)

ou=groups

string

controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_USERS_DN (3)

ou=people

string

controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_BASE_DN (3)

dc=home,dc=arpa

string

controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUPS_FILTER (3)

(member={dn})

string

controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_IMPLEMENTATION (3)

custom

string

controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PASSWORD_FILE (3)

/app/secrets/AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PASSWORD

string

controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_START_TLS (3)

false

string

controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TIMEOUT (3)

5s

string

controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USER.secretKeyRef.key (1)

AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USER

string

controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USER.secretKeyRef.name (1)

authelia-file-secret

string

controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USER (3)

uid=admin,ou=people,dc=home,dc=arpa

string

controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERS_FILTER (3)

(&({username_attribute}={input})(objectClass=person))

string

controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_PASSWORD_RESET_DISABLE (3)

true

string

controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_REFRESH_INTERVAL (3)

1m

string

controllers.authelia.containers.app.env.AUTHELIA_DUO_API_DISABLE (3)

true

string

controllers.authelia.containers.app.env.AUTHELIA_NOTIFIER_SMTP_ADDRESS (3)

maddy.default.svc.cluster.local:25

string

controllers.authelia.containers.app.env.AUTHELIA_NOTIFIER_SMTP_DISABLE_REQUIRE_TLS (3)

true

string

controllers.authelia.containers.app.env.AUTHELIA_NOTIFIER_SMTP_SENDER (3)

Authelia <${SECRET_SMTP_FROM}>

string

controllers.authelia.containers.app.env.AUTHELIA_SERVER_PORT (3)

number

controllers.authelia.containers.app.env.AUTHELIA_SESSION_SECRET_FILE (3)

/app/secrets/AUTHELIA_SESSION_SECRET

string

controllers.authelia.containers.app.env.AUTHELIA_STORAGE_ENCRYPTION_KEY_FILE (3)

/app/secrets/AUTHELIA_STORAGE_ENCRYPTION_KEY

string

controllers.authelia.containers.app.env.TZ (3)

${TIMEZONE}

string

controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDRESS (2)

ldap://glauth.auth.svc.cluster.local:389

string

controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_DISPLAY_NAME (2)

givenName

string

controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_GROUP_NAME (2)

ou

string

controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_MAIL (2)

mail

string

controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_USERNAME (2)

uid

string

controllers.authelia.containers.app.env.AUTHELIA_CERTIFICATES_DIRECTORY (2)

/trusted_certs

string

controllers.authelia.containers.app.env.AUTHELIA_DUO_API_INTEGRATION_KEY_FILE (2)

/app/secrets/AUTHELIA_DUO_API_INTEGRATION_KEY

string

controllers.authelia.containers.app.env.AUTHELIA_DUO_API_SECRET_KEY_FILE (2)

/app/secrets/AUTHELIA_DUO_API_SECRET_KEY

string

controllers.authelia.containers.app.env.AUTHELIA_IDENTITY_PROVIDERS_OIDC_HMAC_SECRET_FILE (2)

/app/secrets/AUTHELIA_IDENTITY_PROVIDERS_OIDC_HMAC_SECRET

string

controllers.authelia.containers.app.env.AUTHELIA_NOTIFIER_SMTP_PASSWORD_FILE (2)

/app/secrets/AUTHELIA_NOTIFIER_SMTP_PASSWORD

string

controllers.authelia.containers.app.env.AUTHELIA_SESSION_REDIS_DATABASE_INDEX (2)

number

controllers.authelia.containers.app.env.AUTHELIA_SESSION_REDIS_HOST (2)

dragonfly.database.svc.cluster.local

string

controllers.authelia.containers.app.env.AUTHELIA_STORAGE_POSTGRES_ADDRESS.valueFrom.secretKeyRef.key (1)

host

string

controllers.authelia.containers.app.env.AUTHELIA_STORAGE_POSTGRES_ADDRESS.valueFrom.secretKeyRef.name (1)

authelia-pguser-secret

string

controllers.authelia.containers.app.env.AUTHELIA_STORAGE_POSTGRES_ADDRESS (2)

postgres16-rw.database.svc.cluster.local

string

controllers.authelia.containers.app.env.AUTHELIA_STORAGE_POSTGRES_DATABASE.valueFrom.secretKeyRef.key (1)

db

string

controllers.authelia.containers.app.env.AUTHELIA_STORAGE_POSTGRES_DATABASE.valueFrom.secretKeyRef.name (1)

authelia-pguser-secret

string

controllers.authelia.containers.app.env.AUTHELIA_STORAGE_POSTGRES_DATABASE (2)

authelia

string

controllers.authelia.containers.app.env.AUTHELIA_STORAGE_POSTGRES_PASSWORD_FILE (2)

/app/secrets/AUTHELIA_STORAGE_POSTGRES_PASSWORD

string

controllers.authelia.containers.app.env.AUTHELIA_STORAGE_POSTGRES_PASSWORD.valueFrom.secretKeyRef.key (2)

password

string

controllers.authelia.containers.app.env.AUTHELIA_STORAGE_POSTGRES_PASSWORD.valueFrom.secretKeyRef.name (2)

authelia-pguser-authelia

string

controllers.authelia.containers.app.env.AUTHELIA_WEBAUTHN_DISABLE (2)

true

string

controllers.authelia.containers.app.env.AUTHELIA_ACCESS_CONTROL_DEFAULT_POLICY (1)

one_factor

string

controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_MEMBER_OF (1)

memberOf

string

controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_DISPLAY_NAME_ATTRIBUTE (1)

displayName

string

controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUP_NAME_ATTRIBUTE (1)

cn

string

controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_MAIL_ATTRIBUTE (1)

mail

string

controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_URL (1)

ldap://lldap.default.svc.cluster.local:389

string

controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERNAME_ATTRIBUTE (1)

uid

string

controllers.authelia.containers.app.env.AUTHELIA_DEFAULT_REDIRECTION_URL (1)

https://auth.${SECRET_DOMAIN}

string

controllers.authelia.containers.app.env.AUTHELIA_IDENTITY_VALIDATION_RESET_PASSWORD_JWT_SECRET_FILE (1)

/config/secrets/AUTHELIA_JWT_SECRET

string

controllers.authelia.containers.app.env.AUTHELIA_NOTIFIER_SMTP_HOST (1)

${SECRET_MAIL_HOST}

string

controllers.authelia.containers.app.env.AUTHELIA_NOTIFIER_SMTP_PORT (1)

${SECRET_MAIL_PORT}

string

controllers.authelia.containers.app.env.AUTHELIA_SESSION_DOMAIN (1)

${SECRET_DOMAIN}

string

controllers.authelia.containers.app.env.AUTHELIA_SESSION_NAME (1)

authelia-home-cluster

string

controllers.authelia.containers.app.env.AUTHELIA_SESSION_REDIS_PASSWORD.valueFrom.secretKeyRef.key (1)

password

string

controllers.authelia.containers.app.env.AUTHELIA_SESSION_REDIS_PASSWORD.valueFrom.secretKeyRef.name (1)

dragonfly-secret

string

controllers.authelia.containers.app.env.AUTHELIA_SESSION_REDIS_PORT (1)

number

controllers.authelia.containers.app.env.AUTHELIA_STORAGE_POSTGRES_USERNAME.valueFrom.secretKeyRef.key (1)

user

string

controllers.authelia.containers.app.env.AUTHELIA_STORAGE_POSTGRES_USERNAME.valueFrom.secretKeyRef.name (1)

authelia-pguser-secret

string

controllers.authelia.containers.app.env.AUTHELIA_STORAGE_POSTGRES_USERNAME (1)

authelia

string

controllers.authelia.containers.app.env.AUTHELIA_TOTP_DISABLE (1)

false

boolean

controllers.authelia.containers.app.env.AUTHELIA_WEBAUTHN_ENABLE_PASSKEY_LOGIN (1)

true

string

controllers.authelia.containers.app.env.AUTHELIA_WEBAUTHN_EXPERIMENTAL_ENABLE_PASSKEY_UV_TWO_FACTORS (1)

true

string

controllers.authelia.containers.app.env.AUTHELIA_WEBAUTHN_SELECTION_CRITERIA_DISCOVERABILITY (1)

required

string

controllers.authelia.containers.app.env.AUTHELIA_WEBAUTHN_SELECTION_CRITERIA_USER_VERIFICATION (1)

required

string

controllers.authelia.containers.app.env.CLUSTER_CIDR (1)

${CLUSTER_CIDR}

string

controllers.authelia.containers.app.env.HOME_CIDR (1)

${HOME_CIDR}

string

controllers.authelia.containers.app.env.NODE_CIDR (1)

${NODE_CIDR}

string

controllers.authelia.containers.app.env.SECRET_DOMAIN (1)

${SECRET_DOMAIN}

string

controllers.authelia.containers.app.env.SECRET_EXTERNAL_DOMAIN (1)

${SECRET_EXTERNAL_DOMAIN}

string

controllers.authelia.containers.app.env.SECRET_INTERNAL_DOMAIN (1)

${SECRET_INTERNAL_DOMAIN}

string

controllers.authelia.containers.app.env.SECRET_PUBLIC_DOMAIN (1)

${SECRET_PUBLIC_DOMAIN}

string

controllers.authelia.containers.app.securityContext.allowPrivilegeEscalation (15)

false

boolean

controllers.authelia.containers.app.securityContext.capabilities.drop[] (15)

- ALL

string

controllers.authelia.containers.app.securityContext.readOnlyRootFilesystem (15)

true

boolean

controllers.authelia.containers.app.args[] (6)

- --config
- /config/configuration.yml,/secrets/jwks.yml,/secrets/clients.yml

string

controllers.authelia.containers.anubis.env.BIND (1)

:8923

string

controllers.authelia.containers.anubis.env.DIFFICULTY (1)

string

controllers.authelia.containers.anubis.env.ED25519_PRIVATE_KEY_HEX.valueFrom.secretKeyRef.key (1)

ED25519_PRIVATE_KEY_HEX

string

controllers.authelia.containers.anubis.env.ED25519_PRIVATE_KEY_HEX.valueFrom.secretKeyRef.name (1)

anubis-key-authelia

string

controllers.authelia.containers.anubis.env.SERVE_ROBOTS_TXT (1)

true

string

controllers.authelia.containers.anubis.env.TARGET (1)

http://localhost:80

string

controllers.authelia.containers.anubis.env.TZ (1)

${TIMEZONE}

string

controllers.authelia.containers.anubis.image.repository (1)

ghcr.io/techarohq/anubis

string

controllers.authelia.containers.anubis.image.tag (1)

v1.25.0

string

controllers.authelia.containers.anubis.ports[].containerPort (1)

80
8080
8923

number

controllers.authelia.containers.anubis.ports[].name (1)

authelia
metrics
anubis

string

controllers.authelia.containers.anubis.resources.limits.memory (1)

256Mi

string

controllers.authelia.containers.anubis.resources.requests.cpu (1)

26m

string

controllers.authelia.containers.anubis.resources.requests.memory (1)

256Mi

string

controllers.authelia.containers.anubis.securityContext.allowPrivilegeEscalation (1)

false

boolean

controllers.authelia.containers.anubis.securityContext.capabilities.drop[] (1)

- ALL

string

controllers.authelia.containers.anubis.securityContext.readOnlyRootFilesystem (1)

true

boolean

controllers.authelia.containers.authelia.env.AUTHELIA_SERVER_ADDRESS (1)

tcp://:80

string

controllers.authelia.containers.authelia.env.AUTHELIA_SERVER_DISABLE_HEALTHCHECK (1)

true

string

controllers.authelia.containers.authelia.env.AUTHELIA_TELEMETRY_METRICS_ADDRESS (1)

tcp://0.0.0.0:8080

string

controllers.authelia.containers.authelia.env.AUTHELIA_TELEMETRY_METRICS_ENABLED (1)

true

string

controllers.authelia.containers.authelia.env.AUTHELIA_THEME (1)

dark

string

controllers.authelia.containers.authelia.env.X_AUTHELIA_CONFIG (1)

/config/configuration.yaml

string

controllers.authelia.containers.authelia.env.X_AUTHELIA_CONFIG_FILTERS (1)

template

string

controllers.authelia.containers.authelia.envFrom[].secretRef.name (1)

authelia-secret

string

controllers.authelia.containers.authelia.image.repository (1)

ghcr.io/authelia/authelia

string

controllers.authelia.containers.authelia.image.tag (1)

4.39.19

string

controllers.authelia.containers.authelia.probes.liveness.custom (1)

true

boolean

controllers.authelia.containers.authelia.probes.liveness.enabled (1)

true

boolean

controllers.authelia.containers.authelia.probes.liveness.spec.failureThreshold (1)

number

controllers.authelia.containers.authelia.probes.liveness.spec.httpGet.path (1)

/api/health

string

controllers.authelia.containers.authelia.probes.liveness.spec.httpGet.port (1)

number

controllers.authelia.containers.authelia.probes.liveness.spec.initialDelaySeconds (1)

number

controllers.authelia.containers.authelia.probes.liveness.spec.periodSeconds (1)

number

controllers.authelia.containers.authelia.probes.liveness.spec.timeoutSeconds (1)

number

controllers.authelia.containers.authelia.probes.readiness.custom (1)

true

boolean

controllers.authelia.containers.authelia.probes.readiness.enabled (1)

true

boolean

controllers.authelia.containers.authelia.probes.readiness.spec.failureThreshold (1)

number

controllers.authelia.containers.authelia.probes.readiness.spec.httpGet.path (1)

/api/health

string

controllers.authelia.containers.authelia.probes.readiness.spec.httpGet.port (1)

number

controllers.authelia.containers.authelia.probes.readiness.spec.initialDelaySeconds (1)

number

controllers.authelia.containers.authelia.probes.readiness.spec.periodSeconds (1)

number

controllers.authelia.containers.authelia.probes.readiness.spec.timeoutSeconds (1)

number

controllers.authelia.containers.authelia.resources.limits.memory (1)

42Mi

string

controllers.authelia.containers.authelia.resources.requests.cpu (1)

10m

string

controllers.authelia.containers.authelia.resources.requests.memory (1)

42Mi

string

controllers.authelia.containers.authelia.securityContext.allowPrivilegeEscalation (1)

false

boolean

controllers.authelia.containers.authelia.securityContext.capabilities.drop[] (1)

- ALL

string

controllers.authelia.containers.authelia.securityContext.readOnlyRootFilesystem (1)

true

boolean

controllers.authelia.annotations."reloader.stakater.com/auto" (20)

true

string

controllers.authelia.annotations."configmap.reloader.stakater.com/reload" (1)

authelia

string

controllers.authelia.annotations."secret.reloader.stakater.com/reload" (1)

authelia,authelia-files

string

controllers.authelia.replicas (17)

number

controllers.authelia.strategy (17)

RollingUpdate

string

controllers.authelia.initContainers.init-db.image.repository (11)

ghcr.io/home-operations/postgres-init

string

controllers.authelia.initContainers.init-db.image.tag (11)

17.4

number, string

controllers.authelia.initContainers.init-db.image.pullPolicy (3)

IfNotPresent

string

controllers.authelia.initContainers.init-db.envFrom[].secretRef.name (10)

authelia-secret

string

controllers.authelia.initContainers.init-db.env.INIT_POSTGRES_DBNAME (1)

authelia

string

controllers.authelia.initContainers.init-db.env.INIT_POSTGRES_HOST (1)

postgres16-rw.database.svc.cluster.local

string

controllers.authelia.initContainers.init-db.env.INIT_POSTGRES_PASS.valueFrom.secretKeyRef.key (1)

AUTHELIA_STORAGE_POSTGRES_PASSWORD

string

controllers.authelia.initContainers.init-db.env.INIT_POSTGRES_PASS.valueFrom.secretKeyRef.name (1)

authelia-secret

string

controllers.authelia.initContainers.init-db.env.INIT_POSTGRES_SUPER_PASS.valueFrom.secretKeyRef.key (1)

password

string

controllers.authelia.initContainers.init-db.env.INIT_POSTGRES_SUPER_PASS.valueFrom.secretKeyRef.name (1)

cloudnative-pg-secret

string

controllers.authelia.initContainers.init-db.env.INIT_POSTGRES_USER.valueFrom.secretKeyRef.key (1)

AUTHELIA_STORAGE_POSTGRES_USERNAME

string

controllers.authelia.initContainers.init-db.env.INIT_POSTGRES_USER.valueFrom.secretKeyRef.name (1)

authelia-secret

string

controllers.authelia.initContainers.01-init-db.envFrom[].secretRef.name (3)

authelia-secret

string

controllers.authelia.initContainers.01-init-db.image.repository (3)

ghcr.io/home-operations/postgres-init

string

controllers.authelia.initContainers.01-init-db.image.tag (3)

string, number

controllers.authelia.pod.securityContext.runAsGroup (8)

number

controllers.authelia.pod.securityContext.runAsUser (8)

number

controllers.authelia.pod.securityContext.runAsNonRoot (7)

true

boolean

controllers.authelia.pod.securityContext.seccompProfile.type (2)

RuntimeDefault

string

controllers.authelia.pod.securityContext.fsGroup (1)

number

controllers.authelia.pod.securityContext.fsGroupChangePolicy (1)

OnRootMismatch

string

controllers.authelia.pod.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (5)

authelia

string

controllers.authelia.pod.topologySpreadConstraints[].maxSkew (5)

number

controllers.authelia.pod.topologySpreadConstraints[].topologyKey (5)

kubernetes.io/hostname

string

controllers.authelia.pod.topologySpreadConstraints[].whenUnsatisfiable (5)

DoNotSchedule

string

controllers.authelia.pod.enableServiceLinks (2)

false

boolean

controllers.authelia.labels.postgres (2)

true

string

controllers.authelia.type (2)

deployment

string

controllers.main.annotations."reloader.stakater.com/auto" (1)

true

string

controllers.main.containers.main.env.AUTHELIA_SERVER_ADDRESS (1)

tcp://0.0.0.0:9191

string

controllers.main.containers.main.env.AUTHELIA_TELEMETRY_METRICS_ADDRESS (1)

tcp://0.0.0.0:9959

string

controllers.main.containers.main.env.X_AUTHELIA_CONFIG (1)

/config/configuration.yaml

string

controllers.main.containers.main.env.X_AUTHELIA_CONFIG_FILTERS (1)

template

string

controllers.main.containers.main.image.repository (1)

ghcr.io/authelia/authelia

string

controllers.main.containers.main.image.tag (1)

4.39.19@sha256:0c824dcab1ae97c56bf673c5e77fe8cc6bcd400564555140cc8002a12c6b6463

string

controllers.main.containers.main.probes.liveness.custom (1)

true

boolean

controllers.main.containers.main.probes.liveness.enabled (1)

true

boolean

controllers.main.containers.main.probes.liveness.spec.failureThreshold (1)

number

controllers.main.containers.main.probes.liveness.spec.httpGet.path (1)

/api/health

string

controllers.main.containers.main.probes.liveness.spec.httpGet.port (1)

number

controllers.main.containers.main.probes.liveness.spec.initialDelaySeconds (1)

number

controllers.main.containers.main.probes.liveness.spec.periodSeconds (1)

number

controllers.main.containers.main.probes.liveness.spec.timeoutSeconds (1)

number

controllers.main.containers.main.probes.readiness.custom (1)

true

boolean

controllers.main.containers.main.probes.readiness.enabled (1)

true

boolean

controllers.main.containers.main.probes.readiness.spec.failureThreshold (1)

number

controllers.main.containers.main.probes.readiness.spec.httpGet.path (1)

/api/health

string

controllers.main.containers.main.probes.readiness.spec.httpGet.port (1)

number

controllers.main.containers.main.probes.readiness.spec.initialDelaySeconds (1)

number

controllers.main.containers.main.probes.readiness.spec.periodSeconds (1)

number

controllers.main.containers.main.probes.readiness.spec.timeoutSeconds (1)

number

controllers.main.containers.main.probes.startup.enabled (1)

false

boolean

controllers.main.containers.main.resources.limits.memory (1)

200Mi

string

controllers.main.containers.main.resources.requests.cpu (1)

5m

string

controllers.main.containers.main.resources.requests.memory (1)

10Mi

string

controllers.main.initContainers.01-init-db.env.INIT_POSTGRES_DBNAME (1)

authelia

string

controllers.main.initContainers.01-init-db.env.INIT_POSTGRES_HOST (1)

postgres-lb.storage.svc.cluster.local

string

controllers.main.initContainers.01-init-db.env.INIT_POSTGRES_PASS (1)

${AUTHELIA_STORAGE_POSTGRES_PASSWORD}

string

controllers.main.initContainers.01-init-db.env.INIT_POSTGRES_SUPER_PASS (1)

${POSTGRES_SUPER_PASS}

string

controllers.main.initContainers.01-init-db.env.INIT_POSTGRES_USER (1)

${AUTHELIA_STORAGE_POSTGRES_USERNAME}

string

controllers.main.initContainers.01-init-db.image.pullPolicy (1)

IfNotPresent

string

controllers.main.initContainers.01-init-db.image.repository (1)

ghcr.io/home-operations/postgres-init

string

controllers.main.initContainers.01-init-db.image.tag (1)

number

controllers.main.pod.enableServiceLinks (1)

false

boolean

controllers.main.pod.securityContext.fsGroup (1)

number

controllers.main.pod.securityContext.fsGroupChangePolicy (1)

OnRootMismatch

string

controllers.main.pod.securityContext.runAsGroup (1)

number

controllers.main.pod.securityContext.runAsUser (1)

number

controllers.main.pod.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (1)

authelia

string

controllers.main.pod.topologySpreadConstraints[].maxSkew (1)

number

controllers.main.pod.topologySpreadConstraints[].topologyKey (1)

kubernetes.io/hostname

string

controllers.main.pod.topologySpreadConstraints[].whenUnsatisfiable (1)

DoNotSchedule

string

controllers.main.replicas (1)

number

controllers.main.strategy (1)

RollingUpdate

string

service.app.ports.http.port (21)

number

service.app.ports.http.primary (4)

true

boolean

service.app.ports.http.protocol (1)

HTTP

string

service.app.ports.metrics.port (20)

number

service.app.ports.metrics.enabled (3)

true

boolean

service.app.ports.metrics.protocol (1)

HTTP

string

service.app.controller (18)

authelia

string

service.app.ipFamilyPolicy (3)

PreferDualStack

string

service.main.ports.http.port (2)

number

service.main.ports.metrics.enabled (2)

true

boolean

service.main.ports.metrics.port (2)

number

service.main.controller (1)

main

string

service.authelia.controller (1)

authelia

string

service.authelia.ports.anubis.port (1)

number

service.authelia.ports.http.port (1)

number

service.authelia.ports.metrics.port (1)

number

serviceMonitor.app.endpoints[].port (19)

metrics

string

serviceMonitor.app.endpoints[].path (15)

/metrics

string

serviceMonitor.app.endpoints[].interval (14)

1m

string

serviceMonitor.app.endpoints[].scheme (14)

http

string

serviceMonitor.app.endpoints[].scrapeTimeout (14)

10s

string

serviceMonitor.app.serviceName (18)

authelia

string

serviceMonitor.app.enabled (5)

true

boolean

serviceMonitor.main.enabled (1)

true

boolean

serviceMonitor.main.endpoints[].interval (1)

1m

string

serviceMonitor.main.endpoints[].path (1)

/metrics

string

serviceMonitor.main.endpoints[].port (1)

metrics

string

serviceMonitor.main.endpoints[].scheme (1)

http

string

serviceMonitor.main.endpoints[].scrapeTimeout (1)

10s

string

serviceMonitor.main.serviceName (1)

authelia

string

route.app.hostnames[] (15)

- auth.${SECRET_DOMAIN}

string

route.app.parentRefs[].name (15)

envoy-external

string

route.app.parentRefs[].namespace (15)

network

string

route.app.parentRefs[].sectionName (10)

https

string

route.app.rules[].backendRefs[].port (10)

number, string

route.app.rules[].backendRefs[].identifier (6)

app

string

route.app.rules[].backendRefs[].name (4)

authelia

string

route.app.rules[].filters[].type (2)

ResponseHeaderModifier

string

route.app.rules[].filters[].requestHeaderModifier.set[].name (1)

Cache-Control
Pragma
X-Frame-Options
X-XSS-Protection

string

route.app.rules[].filters[].requestHeaderModifier.set[].value (1)

no-store
no-cache
SAMEORIGIN
1; mode=block

string

route.app.rules[].filters[].responseHeaderModifier.set[].name (1)

X-Frame-Options
X-XSS-Protection
Cache-Control
Pragma

string

route.app.rules[].filters[].responseHeaderModifier.set[].value (1)

SAMEORIGIN
1; mode=block
no-store
no-cache

string

route.app.annotations."gatus.home-operations.com/endpoint" (2)

name: Authelia

string

route.app.annotations."gethomepage.dev/description" (2)

Open-source authentication and authorization server

string

route.app.annotations."gethomepage.dev/enabled" (2)

true

string

route.app.annotations."gethomepage.dev/group" (2)

Auth

string

route.app.annotations."gethomepage.dev/icon" (2)

authelia

string

route.app.annotations."gethomepage.dev/name" (2)

Authelia

string

route.app.annotations.glance/icon (2)

https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/png/authelia.png

string

route.app.annotations.glance/id (2)

Security

string

route.app.annotations.glance/name (2)

Authelia

string

route.app.annotations.glance/show (2)

true

string

route.app.annotations."gatus.home-operations.com/enabled" (1)

true

string

route.app.annotations."gethomepage.dev/app" (1)

authelia

string

route.authelia.hostnames[] (1)

- auth.${CLUSTER_DOMAIN}

string

route.authelia.parentRefs[].name (1)

envoy-external

string

route.authelia.parentRefs[].namespace (1)

network

string

route.authelia.rules[].backendRefs[].identifier (1)

authelia

string

route.authelia.rules[].backendRefs[].port (1)

anubis

string

route.internal.annotations."gatus.home-operations.com/enabled" (1)

true

string

route.internal.hostnames[] (1)

- auth.${SECRET_DOMAIN}

string

route.internal.parentRefs[].name (1)

envoy-internal

string

route.internal.parentRefs[].namespace (1)

network

string

route.main.annotations."gatus.home-operations.com/endpoint" (1)

group: infrastructure

string

route.main.annotations."gethomepage.dev/enabled" (1)

true

string

route.main.annotations."gethomepage.dev/group" (1)

Infra

string

route.main.annotations."gethomepage.dev/icon" (1)

authelia.svg

string

route.main.hostnames[] (1)

- auth.${SECRET_DOMAIN}
- auth.${SECRET_DOMAIN_TWO}

string

route.main.parentRefs[].name (1)

envoy-external

string

route.main.parentRefs[].namespace (1)

network

string

route.main.parentRefs[].sectionName (1)

https

string

defaultPodOptions.securityContext.runAsGroup (13)

number

defaultPodOptions.securityContext.runAsUser (13)

number

defaultPodOptions.securityContext.runAsNonRoot (12)

true

boolean

defaultPodOptions.securityContext.fsGroupChangePolicy (5)

OnRootMismatch

string

defaultPodOptions.securityContext.seccompProfile.type (5)

RuntimeDefault

string

defaultPodOptions.securityContext.fsGroup (4)

number

defaultPodOptions.enableServiceLinks (7)

false

boolean

defaultPodOptions.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (6)

authelia

string

defaultPodOptions.topologySpreadConstraints[].maxSkew (6)

number

defaultPodOptions.topologySpreadConstraints[].topologyKey (6)

kubernetes.io/hostname

string

defaultPodOptions.topologySpreadConstraints[].whenUnsatisfiable (6)

DoNotSchedule

string

defaultPodOptions.automountServiceAccountToken (1)

false

boolean

defaultPodOptions.hostIPC (1)

false

boolean

defaultPodOptions.hostNetwork (1)

false

boolean

defaultPodOptions.hostPID (1)

false

boolean

defaultPodOptions.shareProcessNamespace (1)

false

boolean

ingress.app.className (5)

external

string

ingress.app.hosts[].host (5)

auth.${SECRET_DOMAIN}

string

ingress.app.hosts[].paths[].path (5)

string

ingress.app.hosts[].paths[].service.identifier (5)

app

string

ingress.app.hosts[].paths[].service.port (5)

http

string, number

ingress.app.annotations."external-dns.alpha.kubernetes.io/target" (4)

external.${SECRET_DOMAIN}

string

ingress.app.annotations."nginx.ingress.kubernetes.io/configuration-snippet" (3)

add_header Cache-Control "no-store";
add_header Pragma "no-cache";
add_header X-Frame-Options "SAMEORIGIN";
add_header X-XSS-Protection "1; mode=block";

string

ingress.app.annotations."hajimari.io/icon" (2)

mdi:shield-account

string

ingress.app.annotations."gethomepage.dev/enabled" (1)

true

string

ingress.app.annotations."gethomepage.dev/group" (1)

Services

string

ingress.app.annotations."gethomepage.dev/icon" (1)

mdi-two-factor-authentication

string

ingress.app.annotations."gethomepage.dev/name" (1)

Authelia

string

ingress.app.annotations."nginx.ingress.kubernetes.io/add-header-Cache-Control" (1)

no-store

string

ingress.app.annotations."nginx.ingress.kubernetes.io/add-header-Pragma" (1)

no-cache

string

ingress.app.annotations."nginx.ingress.kubernetes.io/add-header-X-Frame-Options" (1)

SAMEORIGIN

string

ingress.app.annotations."nginx.ingress.kubernetes.io/add-header-X-XSS-Protection" (1)

1; mode=block

string

ingress.app.tls[].hosts[] (2)

- auth.${SECRET_DOMAIN}

string

ingress.app.enabled (1)

true

boolean

ingress.main.annotations."hajimari.io/icon" (2)

mdi:shield-account

string

ingress.main.annotations."nginx.ingress.kubernetes.io/configuration-snippet" (2)

add_header Cache-Control "no-store";
add_header Pragma "no-cache";
add_header X-Frame-Options "SAMEORIGIN";
add_header X-XSS-Protection "1; mode=block";

string

ingress.main.annotations."external-dns.alpha.kubernetes.io/target" (1)

ingress.${ORG_DOMAIN}

string

ingress.main.annotations."external-dns.home.arpa/enabled" (1)

true

string

ingress.main.annotations."hajimari.io/enable" (1)

true

string

ingress.main.annotations."hajimari.io/group" (1)

Authentication

string

ingress.main.annotations."hajimari.io/name" (1)

Authelia

string

ingress.main.enabled (2)

true

boolean

ingress.main.hosts[].host (2)

auth.${ORG_DOMAIN}

string

ingress.main.hosts[].paths[].path (2)

string

ingress.main.hosts[].paths[].pathType (2)

Prefix

string

ingress.main.hosts[].paths[].service.identifier (1)

main

string

ingress.main.hosts[].paths[].service.port (1)

http

string

ingress.main.className (1)

external

string

ingress.main.ingressClassName (1)

external

string

ingress.main.tls[].hosts[] (1)

- auth.${ORG_DOMAIN}

string

enableServiceLinks (2)

false

boolean

args[] (1)

- --config
- /config/configuration.yaml
- --config.experimental.filters
- expand-env

string

controller.annotations."reloader.stakater.com/auto" (1)

true

string

controller.replicas (1)

number

controller.strategy (1)

RollingUpdate

string

env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_GROUPS_DN (1)

ou=groups

string

env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_USERS_DN (1)

ou=people

string

env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDRESS (1)

ldap://lldap.auth.svc.cluster.local:389

string

env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_DISPLAY_NAME (1)

displayName

string

env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_GROUP_NAME (1)

cn

string

env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_MAIL (1)

mail

string

env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_USERNAME (1)

uid

string

env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_BASE_DN (1)

dc=home,dc=arpa

string

env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUPS_FILTER (1)

(member={dn})

string

env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_IMPLEMENTATION (1)

custom

string

env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_START_TLS (1)

false

string

env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TIMEOUT (1)

5s

string

env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USER (1)

uid=admin,ou=people,dc=home,dc=arpa

string

env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERS_FILTER (1)

(&({username_attribute}={input})(objectClass=person))

string

env.AUTHELIA_AUTHENTICATION_BACKEND_PASSWORD_RESET_DISABLE (1)

true

string

env.AUTHELIA_DEFAULT_REDIRECTION_URL (1)

https://auth.${ORG_DOMAIN}

string

env.AUTHELIA_DUO_API_DISABLE (1)

true

string

env.AUTHELIA_LOG_LEVEL (1)

info

string

env.AUTHELIA_NOTIFIER_DISABLE_STARTUP_CHECK (1)

true

string

env.AUTHELIA_NOTIFIER_SMTP_SENDER (1)

Authelia <noreply@${NET_DOMAIN}>

string

env.AUTHELIA_SERVER_ADDRESS (1)

tcp://:80

string

env.AUTHELIA_SERVER_DISABLE_HEALTHCHECK (1)

true

string

env.AUTHELIA_SESSION_DOMAIN (1)

${ORG_DOMAIN}

string

env.AUTHELIA_SESSION_REDIS_DATABASE_INDEX (1)

number

env.AUTHELIA_SESSION_REDIS_HOST (1)

redis.default.svc.cluster.local

string

env.AUTHELIA_STORAGE_POSTGRES_ADDRESS (1)

postgres.database.svc.cluster.local:5432

string

env.AUTHELIA_STORAGE_POSTGRES_DATABASE.valueFrom.secretKeyRef.key (1)

DATABASE_NAME

string

env.AUTHELIA_STORAGE_POSTGRES_DATABASE.valueFrom.secretKeyRef.name (1)

database-authelia-user

string

env.AUTHELIA_STORAGE_POSTGRES_PASSWORD.valueFrom.secretKeyRef.key (1)

PASSWORD

string

env.AUTHELIA_STORAGE_POSTGRES_PASSWORD.valueFrom.secretKeyRef.name (1)

database-authelia-user

string

env.AUTHELIA_STORAGE_POSTGRES_USERNAME.valueFrom.secretKeyRef.key (1)

LOGIN

string

env.AUTHELIA_STORAGE_POSTGRES_USERNAME.valueFrom.secretKeyRef.name (1)

database-authelia-user

string

env.AUTHELIA_TELEMETRY_METRICS_ADDRESS (1)

tcp://0.0.0.0:8080

string

env.AUTHELIA_TELEMETRY_METRICS_ENABLED (1)

true

string

env.AUTHELIA_THEME (1)

grey

string

env.AUTHELIA_TOTP_ISSUER (1)

authelia.com

string

env.AUTHELIA_WEBAUTHN_DISABLE (1)

true

string

envFrom[].secretRef.name (1)

authelia-secret

string

image.repository (1)

ghcr.io/authelia/authelia

string

image.tag (1)

master@sha256:c1a838724e95a3ebc9ca210f0d81fc25a77e47e0b583f146c5781e1701a4199f

string

podSecurityContext.fsGroup (1)

number

podSecurityContext.fsGroupChangePolicy (1)

OnRootMismatch

string

podSecurityContext.runAsGroup (1)

number

podSecurityContext.runAsUser (1)

number

probes.liveness.custom (1)

true

boolean

probes.liveness.enabled (1)

true

boolean

probes.liveness.spec.failureThreshold (1)

number

probes.liveness.spec.httpGet.path (1)

/api/health

string

probes.liveness.spec.httpGet.port (1)

number

probes.liveness.spec.initialDelaySeconds (1)

number

probes.liveness.spec.periodSeconds (1)

number

probes.liveness.spec.timeoutSeconds (1)

number

probes.readiness.custom (1)

true

boolean

probes.readiness.enabled (1)

true

boolean

probes.readiness.spec.failureThreshold (1)

number

probes.readiness.spec.httpGet.path (1)

/api/health

string

probes.readiness.spec.httpGet.port (1)

number

probes.readiness.spec.initialDelaySeconds (1)

number

probes.readiness.spec.periodSeconds (1)

number

probes.readiness.spec.timeoutSeconds (1)

number

probes.startup.enabled (1)

false

boolean

resources.limits.memory (1)

100Mi

string

resources.requests.cpu (1)

5m

string

resources.requests.memory (1)

10Mi

string

topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (1)

authelia

string

topologySpreadConstraints[].maxSkew (1)

number

topologySpreadConstraints[].topologyKey (1)

kubernetes.io/hostname

string

topologySpreadConstraints[].whenUnsatisfiable (1)

DoNotSchedule

string