From 1cae3f02671191bf54c56bd4a4e83d714febac2a Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Mika=C3=ABl=20Hardy?= Date: Wed, 7 Feb 2024 15:19:06 +0000 Subject: [PATCH] remove the authelia snippets from the git --- .../npm/snippets/authelia-authrequest.conf | 25 ------------- .../npm/snippets/authelia-location-basic.conf | 36 ------------------- serenity/npm/snippets/authelia-location.conf | 36 ------------------- serenity/npm/snippets/proxy.conf | 35 ------------------ 4 files changed, 132 deletions(-) delete mode 100644 serenity/npm/snippets/authelia-authrequest.conf delete mode 100644 serenity/npm/snippets/authelia-location-basic.conf delete mode 100644 serenity/npm/snippets/authelia-location.conf delete mode 100644 serenity/npm/snippets/proxy.conf diff --git a/serenity/npm/snippets/authelia-authrequest.conf b/serenity/npm/snippets/authelia-authrequest.conf deleted file mode 100644 index 1fa4ed1..0000000 --- a/serenity/npm/snippets/authelia-authrequest.conf +++ /dev/null @@ -1,25 +0,0 @@ -## Send a subrequest to Authelia to verify if the user is authenticated and has permission to access the resource. -auth_request /authelia; - -## Set the $target_url variable based on the original request. - -## Comment this line if you're using nginx without the http_set_misc module. -set_escape_uri $target_url $scheme://$http_host$request_uri; - -## Uncomment this line if you're using NGINX without the http_set_misc module. -# set $target_url $scheme://$http_host$request_uri; - -## Save the upstream response headers from Authelia to variables. -auth_request_set $user $upstream_http_remote_user; -auth_request_set $groups $upstream_http_remote_groups; -auth_request_set $name $upstream_http_remote_name; -auth_request_set $email $upstream_http_remote_email; - -## Inject the response headers from the variables into the request made to the backend. -proxy_set_header Remote-User $user; -proxy_set_header Remote-Groups $groups; -proxy_set_header Remote-Name $name; -proxy_set_header Remote-Email $email; - -## If the subreqest returns 200 pass to the backend, if the subrequest returns 401 redirect to the portal. -error_page 401 =302 https://auth.mikee.fr/?rd=$target_url; \ No newline at end of file diff --git a/serenity/npm/snippets/authelia-location-basic.conf b/serenity/npm/snippets/authelia-location-basic.conf deleted file mode 100644 index 534c17a..0000000 --- a/serenity/npm/snippets/authelia-location-basic.conf +++ /dev/null @@ -1,36 +0,0 @@ -set $upstream_authelia http://auth:9091/api/verify?auth=basic; - -# Virtual endpoint created by nginx to forward auth requests. -location /authelia-basic { - ## Essential Proxy Configuration - internal; - proxy_pass $upstream_authelia; - - ## Headers - ## The headers starting with X-* are required. - proxy_set_header X-Original-URL $scheme://$http_host$request_uri; - proxy_set_header X-Original-Method $request_method; - proxy_set_header X-Forwarded-Method $request_method; - proxy_set_header X-Forwarded-Proto $scheme; - proxy_set_header X-Forwarded-Host $http_host; - proxy_set_header X-Forwarded-Uri $request_uri; - proxy_set_header X-Forwarded-For $remote_addr; - proxy_set_header Content-Length ""; - proxy_set_header Connection ""; - - ## Basic Proxy Configuration - proxy_pass_request_body off; - proxy_next_upstream error timeout invalid_header http_500 http_502 http_503; # Timeout if the real server is dead - proxy_redirect http:// $scheme://; - proxy_http_version 1.1; - proxy_cache_bypass $cookie_session; - proxy_no_cache $cookie_session; - proxy_buffers 4 32k; - client_body_buffer_size 128k; - - ## Advanced Proxy Configuration - send_timeout 5m; - proxy_read_timeout 240; - proxy_send_timeout 240; - proxy_connect_timeout 240; -} \ No newline at end of file diff --git a/serenity/npm/snippets/authelia-location.conf b/serenity/npm/snippets/authelia-location.conf deleted file mode 100644 index fdb11d1..0000000 --- a/serenity/npm/snippets/authelia-location.conf +++ /dev/null @@ -1,36 +0,0 @@ -set $upstream_authelia http://auth:9091/api/verify; - -## Virtual endpoint created by nginx to forward auth requests. -location /authelia { - ## Essential Proxy Configuration - internal; - proxy_pass $upstream_authelia; - - ## Headers - ## The headers starting with X-* are required. - proxy_set_header X-Original-URL $scheme://$http_host$request_uri; - proxy_set_header X-Original-Method $request_method; - proxy_set_header X-Forwarded-Method $request_method; - proxy_set_header X-Forwarded-Proto $scheme; - proxy_set_header X-Forwarded-Host $http_host; - proxy_set_header X-Forwarded-Uri $request_uri; - proxy_set_header X-Forwarded-For $remote_addr; - proxy_set_header Content-Length ""; - proxy_set_header Connection ""; - - ## Basic Proxy Configuration - proxy_pass_request_body off; - proxy_next_upstream error timeout invalid_header http_500 http_502 http_503; # Timeout if the real server is dead - proxy_redirect http:// $scheme://; - proxy_http_version 1.1; - proxy_cache_bypass $cookie_session; - proxy_no_cache $cookie_session; - proxy_buffers 4 32k; - client_body_buffer_size 128k; - - ## Advanced Proxy Configuration - send_timeout 5m; - proxy_read_timeout 240; - proxy_send_timeout 240; - proxy_connect_timeout 240; -} \ No newline at end of file diff --git a/serenity/npm/snippets/proxy.conf b/serenity/npm/snippets/proxy.conf deleted file mode 100644 index 73c7a52..0000000 --- a/serenity/npm/snippets/proxy.conf +++ /dev/null @@ -1,35 +0,0 @@ -## Headers -proxy_set_header Host $host; -proxy_set_header X-Original-URL $scheme://$http_host$request_uri; -proxy_set_header X-Forwarded-Proto $scheme; -proxy_set_header X-Forwarded-Host $http_host; -proxy_set_header X-Forwarded-Uri $request_uri; -proxy_set_header X-Forwarded-Ssl on; -proxy_set_header X-Forwarded-For $remote_addr; -proxy_set_header X-Real-IP $remote_addr; -proxy_set_header Connection ""; - -## Basic Proxy Configuration -client_body_buffer_size 128k; -proxy_next_upstream error timeout invalid_header http_500 http_502 http_503; ## Timeout if the real server is dead. -proxy_redirect http:// $scheme://; -proxy_http_version 1.1; -proxy_cache_bypass $cookie_session; -proxy_no_cache $cookie_session; -proxy_buffers 64 256k; - -## Trusted Proxies Configuration -## Please read the following documentation before configuring this: -## https://www.authelia.com/integration/proxies/nginx/#trusted-proxies -# set_real_ip_from 10.0.0.0/8; -# set_real_ip_from 172.16.0.0/12; -# set_real_ip_from 192.168.0.0/16; -# set_real_ip_from fc00::/7; -real_ip_header X-Forwarded-For; -real_ip_recursive on; - -## Advanced Proxy Configuration -send_timeout 5m; -proxy_read_timeout 360; -proxy_send_timeout 360; -proxy_connect_timeout 360; \ No newline at end of file