updates

Repo sauber machen

security/authelia/configuration.yml

@@ -1,5 +1,5 @@
----
-# Authelia configuration — Template
+---
+# Authelia configuration - Template
 # Deploy to: /mnt/user/appdata/authelia/config/configuration.yml
 # Docs: https://www.authelia.com/configuration/
 # WICHTIG: Diese Datei NICHT in Git committen wenn user-spezifische Daten enthalten!
@@ -30,7 +30,7 @@ access_control:
     - domain: auth.kaleschke.info
       policy: bypass
 
-    # Oeffentliche Apps — kein Login noetig
+    # Oeffentliche Apps - kein Login noetig
     - domain:
         - immich.kaleschke.info
         - paperless.kaleschke.info
@@ -41,7 +41,7 @@ access_control:
         - homepage.kaleschke.info
       policy: bypass
 
-    # Admin-Dienste — 2FA erforderlich
+    # Admin-Dienste - 2FA erforderlich
     - domain:
         - komodo.kaleschke.info
         - uptime.kaleschke.info
@@ -49,11 +49,7 @@ access_control:
         - scrutiny.kaleschke.info
       policy: two_factor
 
-    # Beszel → OIDC-Login (kein ForwardAuth)
-    - domain: beszel.kaleschke.info
-      policy: bypass
-
-    # Alles andere — 1FA
+    # Alles andere - 1FA
     - domain: "*.kaleschke.info"
       policy: one_factor
 
@@ -83,7 +79,7 @@ notifier:
   disable_startup_check: false
   filesystem:
     filename: /config/notifications.log
-  # SMTP (fuer 2FA-Codes per Mail — optional, empfohlen fuer Produktion):
+  # SMTP (fuer 2FA-Codes per Mail - optional, empfohlen fuer Produktion):
   # smtp:
   #   address: smtp://smtp.example.com:587
   #   username: user@example.com
@@ -95,25 +91,3 @@ totp:
   issuer: kaleschke.info
   period: 30
   skew: 1
-
-identity_providers:
-  oidc:
-    clients:
-      - client_id: 'beszel'
-        client_name: 'Beszel'
-        client_secret: '$argon2id$v=19$m=65536,t=3,p=4$bXTt49iW61s0c8/ZiBlguw$VquorRqL134mjQ6Qa13JY6AI/QCwdk7g1jpc/UtRZPQ'
-        public: false
-        authorization_policy: 'two_factor'
-        require_pkce: true
-        pkce_challenge_method: 'S256'
-        redirect_uris:
-          - 'https://beszel.kaleschke.info/api/oauth2-redirect'
-        scopes:
-          - 'openid'
-          - 'email'
-          - 'profile'
-        response_types:
-          - 'code'
-        grant_types:
-          - 'authorization_code'
-        token_endpoint_auth_method: 'client_secret_basic'