From ebe5c8492447efbddaf59d11932be5cfcb20b05a Mon Sep 17 00:00:00 2001
From: Johanna Dorothea Reichmann <transcaffeine@finallycoffee.eu>
Date: Sun, 10 Apr 2022 11:05:40 +0200
Subject: [PATCH] Draft: feat(authelia): add ansible role for authelia

---
 roles/authelia/defaults/main.yml | 91 ++++++++++++++++++++++++++++++++
 roles/authelia/handlers/main.yml |  0
 roles/authelia/tasks/main.yml    |  0
 roles/authelia/vars/main.yml     | 24 +++++++++
 4 files changed, 115 insertions(+)
 create mode 100644 roles/authelia/defaults/main.yml
 create mode 100644 roles/authelia/handlers/main.yml
 create mode 100644 roles/authelia/tasks/main.yml
 create mode 100644 roles/authelia/vars/main.yml

diff --git a/roles/authelia/defaults/main.yml b/roles/authelia/defaults/main.yml
new file mode 100644
index 0000000..1a797d9
--- /dev/null
+++ b/roles/authelia/defaults/main.yml
@@ -0,0 +1,91 @@
+---
+
+authelia_version:
+authelia_user: authelia
+authelia_base_dir: /opt/authelia
+authelia_domain: authelia.example.org
+
+authelia_config_dir: "{{ authelia_base_dir }}/config"
+authelia_config_file: "{{ authelia_config_dir }}/config.yaml"
+
+authelia_container_name: authelia
+authelia_container_image_name:
+authelia_container_image_tag: ~
+authelia_container_image_ref: "{{ authelia_container_image_name }}:{{ authelia_container_image_tag | default('v' + authelia_version) }}"
+authelia_container_image_force_pull: "{{ authelia_container_image_tag | default(false, True) }}"
+authelia_container_env: {}
+authelia_container_labels: >-2
+  {{ authelia_container_base_labels | combine(authelia_container_extra_labels) }}
+authelia_container_extra_labels: {}
+authelia_container_extra_volumes: []
+authelia_container_volumes: >-2
+  {{ authelia_container_base_volumes
+    + authelia_container_extra_volumes }}
+authelia_container_ports: ~
+authelia_container_networks: ~
+authelia_container_purge_networks: ~
+authelia_container_restart_policy: unless-stopped
+authelia_container_state: started
+
+authelia_container_listen_port: 9091
+authelia_tls: ~
+authelia_smtp: ~
+authelia_redis: ~
+
+
+authelia_config_theme: auto
+authelia_config_jwt_secret: 
+authelia_config_default_redirection_url:
+authelia_config_server_host: 0.0.0.0
+authelia_config_server_port: "{{ authelia_container_listen_port }}"
+authelia_config_server_path: ""
+authelia_config_server_read_buffer_size: 4096
+authelia_config_server_write_buffer_size: 4096
+authelia_config_server_enable_pprof: true
+authelia_config_server_enable_expvars: true
+authelia_config_server_disable_healthcheck:
+authelia_config_server_tls_key: ~
+authelia_config_server_tls_certificate: ~
+authelia_config_server_tls_client_certificates: []
+authelia_config_server_headers_csp_template: ~
+authelia_config_log_level: info
+authelia_config_log_format: json
+authelia_config_log_file_path: ~
+authelia_config_log_keep_stdout: ~
+authelia_config_totp_disable: "{{ authelia_totp | default(true, true) | bool }}"
+authelia_config_totp_issuer: "{{  | default(authelia_domain) }}"
+authelia_config_totp_algorithm:
+authelia_config_totp_digits:
+authelia_config_totp_period:
+authelia_config_totp_skew:
+authelia_config_totp_secret_size: 32
+authelia_config_webauthn_disable:
+authelia_config_webauthn_timeout: 60s
+authelia_config_webauthn_display_name: "Authelia ({{ authelia_domain }})"
+authelia_config_webauthn_attestation_conveyance_preference: indirect
+authelia_config_webauthn_user_verification: preferred
+authelia_config_duo_api_
+authelia_config_duo_api_
+authelia_config_duo_api_
+authelia_config_ntp_
+authelia_config_ntp_
+authelia_config_ntp_
+authelia_config_authentication_backend_
+authelia_config_authentication_backend_
+authelia_config_authentication_backend_
+authelia_config_password_policy_
+authelia_config_password_policy_
+authelia_config_password_policy_
+authelia_config_password_policy_
+authelia_config_access_control_
+authelia_config_access_control_
+authelia_config_access_control_
+authelia_config_access_control_
+authelia_config_session_
+authelia_config_session_redis
+authelia_config_regulation
+authelia_config_storage_
+authelia_config_notifier
+authelia_config_identity_provider_
+
+authelia_extra_config: {}
diff --git a/roles/authelia/handlers/main.yml b/roles/authelia/handlers/main.yml
new file mode 100644
index 0000000..e69de29
diff --git a/roles/authelia/tasks/main.yml b/roles/authelia/tasks/main.yml
new file mode 100644
index 0000000..e69de29
diff --git a/roles/authelia/vars/main.yml b/roles/authelia/vars/main.yml
new file mode 100644
index 0000000..bb7daac
--- /dev/null
+++ b/roles/authelia/vars/main.yml
@@ -0,0 +1,24 @@
+---
+
+authelia_run_user:
+authelia_run_group:
+
+authelia_container_base_volumes: >-2
+  {{ [ authelia_config_file + ":/config/configuration.yml:ro"]
+    + ([ authelia_sqlite_storage_file + ":" + authelia_config_storage_local_path + ":z" ])
+      if authelia_config_storage_local_path | default(false, true) else []
+  }}
+
+authelia_container_base_labels:
+  version: "{{ authelia_version }}"
+
+authelia_config: "{{ authelia_base_config | combine(authelia_extra_config) }}"
+authelia_base_config:
+  theme: "{{ authelia_config_theme }}"
+  jwt_secret: "{{ authelia_config_jwt_secret }}"
+  default_redirection_url: "{{ authelia_config_default_redirection_url }}"
+
+authelia_config_server:
+authelia_config_server_tls:
+authelia_config_totp:
+authelia_config_webauthn: