this vault setup for injective sensitive variables uses the approach described in https://docs.ansible.com/ansible/10/tips_tricks/ansible_tips_tricks.html#keep-vaulted-variables-safely-visible
22 lines
632 B
Django/Jinja
22 lines
632 B
Django/Jinja
AUTHENTIK_ERROR_REPORTING__ENABLED=true
|
|
|
|
AUTHENTIK_REDIS__HOST=redis
|
|
AUTHENTIK_POSTGRESQL__HOST=postgres
|
|
AUTHENTIK_POSTGRESQL__USER=authentik
|
|
AUTHENTIK_POSTGRESQL__NAME=authentik
|
|
AUTHENTIK_POSTGRESQL__PASSWORD={{ authentik_db_password }}
|
|
|
|
AUTHENTIK_SECRET_KEY={{ authentik_secret_key }}
|
|
|
|
AUTHENTIK_EMAIL__HOST=smtp.sendgrid.net
|
|
AUTHENTIK_EMAIL__PORT=587
|
|
AUTHENTIK_EMAIL__USERNAME=apikey
|
|
AUTHENTIK_EMAIL__PASSWORD={{ authentik_sendgrid_api_key }}
|
|
|
|
AUTHENTIK_EMAIL__USE_TLS=true
|
|
AUTHENTIK_EMAIL__TIMEOUT=10
|
|
AUTHENTIK_EMAIL__FROM=auth@cazzzer.com
|
|
|
|
AUTHENTIK_DEFAULT_USER_CHANGE_EMAIL=false
|
|
AUTHENTIK_DEFAULT_USER_CHANGE_USERNAME=false
|