dd

docker-compose/traefik/configuration.yml.j2

@@ -7,10 +7,7 @@ log:
 
 identity_validation:
   reset_password:
-    jwt_secret: "{{ lookup('viczem.keepass.keepass', 'authelia_jwt_secret', 'password') }}"
+    jwt_secret: {{ lookup('viczem.keepass.keepass', 'authelia_jwt_secret', 'password') }}
-
-authelia_jwt_secret
-
 totp:
   issuer: totp.mgrote.net
 
@@ -24,7 +21,7 @@ access_control:
 
 session:
   name: authelia_session
-  secret: unsecure_session_secret
+  secret: {{ lookup('viczem.keepass.keepass', 'authelia_session_secret', 'password') }}
   expiration: 3600                     # 1 hour
   inactivity: 300                      # 5 minutes
   domain: mgrote.net                   # Should match whatever your root protected domain is
@@ -39,7 +36,7 @@ regulation:
   ban_time: 300
 
 storage:
-  encryption_key: "{{ lookup('viczem.keepass.keepass', 'authelia_storage_encryption_key', 'password') }}"
+  encryption_key: {{ lookup('viczem.keepass.keepass', 'authelia_storage_encryption_key', 'password') }}
   local:
     path: /data/db.sqlite3
 

roles/mgrote_docker_compose_inline/tasks/main.yml

@@ -36,7 +36,7 @@
     src: "{{ item }}"
     dest: "{{ compose_dest_basedir }}/{{ item | replace(compose_src_basedir + '/', '') | replace('.j2', '') }}"
   with_items: "{{ lookup('pipe', 'find '+ compose_src_basedir +'/ -type f -name *.j2').split('\n') }}"
-  # no_log: true
+  no_log: true
   register: copy_template
 
 - name: Ensure needed networks exists