Files
fleet-infra/clusters/lab/secrets/authelia-users.enc.yaml
Davide Piu 08eb8255a8 sec: new Authelia password + enforce 2FA for all services
- Generate new unique password for Authelia (not shared with Gitea)
- Change access_control default_policy to two_factor
- Re-encrypt authelia-users secret with SOPS
2026-02-19 23:24:26 +00:00

38 lines
2.3 KiB
YAML

apiVersion: v1
data:
users_database.yml: ENC[AES256_GCM,data:YqAEnHxRZog7Ok5GeF32rCG57LrHwdlDDfI4mcdXL4W9nq0QQY+lfRv2weXh3vpCzi2c0Ibtp0Rj1QdOhZiD4hESDoJ+oeC+jpkU3OeyPlaPDYxs6pyGofbwAU9wakFg+gIx5hpfOSB+aaKS8T2JF7Br3s3bsp3S9ta6tJ4gieDJ1L6HYpeDOphfENd9FIabANWYCnB/s1v0Qh561RIQmXKUROMu8EkxyDtZ8iI4uzuNlpcaAhN8SHMUu03XJ5qPKv1x1CCh16OrjrUh3/rzD1ckC/ruRrK841NxsS2oJU8Z346emMl20PzFD/N3QdTGsD7OgiRLIv4FtkNFkAjWiEkT77WuEYSTdqrZX3fydXULyyX3tk8Xt8yJZYENI8B/hM34mak2hHdL97XZ240zPB6T5ho=,iv:KUyzBpaCO30zf49xtPK2DEhEdVXXaTAjQv4UBlI6MnM=,tag:XSO+uEprozm/7oz82MSlcA==,type:str]
kind: Secret
metadata:
annotations:
apiVersion: v1
kind: Secret
metadata:
annotations: {}
name: authelia-users
namespace: authelia
stringData:
users_database.yml: ENC[AES256_GCM,data:7mwHzcM7jJVRAyMbfAtCsVeVqovyukhzfNym/7vlPfRNWbzYeUHujEh24YGtshZCwpNYr30EtPv6+O97ze5FYaPYJtHazcriNHk9mSq6iH4UQxZz98CNxbNU5zm4soQ8PyA//2ZKLR6ihSgJdopB4H+tpz5e2cat3rsjXEvj9So9QyL8CEnvnPL/5UrNxpAH/frf/uqpikdpenyffQ+FNQB7QRfA2dl3ss2127UoO563SKHAFkN5MyaDe3Ihwn7kH3OwuKBUcck15Br62KQ0GPOXKJ5wjO7NQsZFBvWbK+bvRGDcxg==,iv:T5CVa1JWS5R7vaE6Ukm42hbhnVu1dWGtHpHssfeYf3s=,tag:PEZt2+2NMKCq3WqFgZCh2g==,type:str]
name: authelia-users
namespace: authelia
type: Opaque
sops:
kms: []
gcp_kms: []
azure_kv: []
hc_vault: []
age:
- recipient: age1aq4d879wuczrqj48nnw7ktsddrxfr8y8xaf0j0aqteswmsxnfs7sfs9phj
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1TXplbFVuRldFd2dNdllm
cXhPbDAzOEd5Q0wxNEk0SXNQMGtjZEFWMW1jCjh2OGVXem4yRzEzSHFwZFV6SStY
RkhaSEFNMllnd3VwQk55MzR0d3JHS0kKLS0tIHZGWExrV2pjbStKVWFJdzRuQXpo
bEIwUGZmR1JwVjF2eVMrU3FpTTBBZVkKV020ISvrp6bNuYvW/I4MPuqyMpPcnYD+
EdPhaJGaLZMiK/HrTw7v7MuAYic9ooan58OcSOzG/Y3DXqI8YGV3tg==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2026-02-19T23:24:21Z"
mac: ENC[AES256_GCM,data:T7aDzu8LhusZJzofSxmd0XFtEKal3P+mQoTNigJ5Lm+VW+liqhumiAiRGcKT3Qfm1s1cDDrcbEa3zyPC5QmQB7sKKTOssb9DM4qfn/jAmAoLPixo/c0dlpdAHzMwHe22cuRGVbC+uF3I+yHEbeCdei34gNQTRtAVYaEfoK2A1FA=,iv:pNvdhnNUXXFuvT8r5cFFUuCgT6gJqVqUDV70lNE88c0=,tag:Qyg8ulH8G4Nahd0iuQjmpA==,type:str]
pgp: []
encrypted_regex: ^(data|stringData)$
version: 3.9.4