sec: new Authelia password + enforce 2FA for all services

- Generate new unique password for Authelia (not shared with Gitea) - Change access_control default_policy to two_factor - Re-encrypt authelia-users secret with SOPS
2026-02-19 23:24:26 +00:00
parent 51bcdebca8
commit 08eb8255a8
2 changed files with 10 additions and 10 deletions
--- a/clusters/lab/security/authelia.yaml
+++ b/clusters/lab/security/authelia.yaml
@@ -69,7 +69,7 @@ spec:
          enabled: true
          path: /config/db.sqlite3
      access_control:
-        default_policy: one_factor
+        default_policy: two_factor
      authentication_backend:
        file:
          enabled: true