Moved authelia ACL rules to seperate ConfigMaps

2025-03-01 06:14:47 +01:00
parent c7229f1112
commit 4ae76d668e
8 changed files with 39 additions and 9 deletions
--- a/infra/authelia/secret-authelia-acl.yaml
+++ b/infra/authelia/secret-authelia-acl.yaml
@@ -4,11 +4,6 @@ metadata:
  name: authelia-acl
 stringData:
  rules: |
-    - domain: traefik.${domain}
-      policy: one_factor
-      subject: "group:lldap_admin"
-    - domain: ceph.${domain}
-      policy: one_factor
-      subject: "group:lldap_admin"
-    - domain: grafana.${domain}
-      policy: one_factor
+    # Deny by default, mainly a placeholder to allow patching in other rules
+    - domain: "*"
+      policy: deny