dfg

docker-compose/traefik/configuration.yml.j2

@@ -51,7 +51,7 @@ notifier:
 # https://github.com/lldap/lldap/blob/main/example_configs/authelia_config.yml
 authentication_backend:
   password_reset:
-    disable: false
+    disable: true
   refresh_interval: 1m
   ldap:
     implementation: custom
@@ -62,7 +62,7 @@ authentication_backend:
     additional_users_dn: ou=people
     users_filter: "(&({username_attribute}={input})(objectClass=person))"
     additional_groups_dn: ou=groups
-    groups_filter: "(member={dn})"
+    groups_filter: "(&(member={dn})(objectclass=groupOfUniqueNames))y
     attributes:
       display_name: displayName
       username: uid

docker-compose/traefik/docker-compose.yml.j2

@@ -94,3 +94,5 @@ volumes:
 # test mail senden
 # ldap gruppe per app
 # rechte konzept fur ldap beschreiben +  https://www.reddit.com/r/selfhosted/comments/158quyz/authelia_ldap_groups/
+# munin absichern
+# weitere seiten?