# Argon2id hash of the user's password. Authelia never stores the password. A placeholder is not a valid hash and the stack would not start, so this line is commented out and the compose file stops until you set it. # Make your own (it asks for the password twice): docker run --rm -it authelia/authelia:4.39.28 authelia crypto hash generate argon2 # Copy the part after 'Digest: ' and keep the single quotes: the hash contains $ signs, which Compose would otherwise read as variables. # AUTHELIA_USER_PASSWORD_HASH= # Three random secrets; the stack does not start without them. The lab's values are public, and Authelia would accept a placeholder as a real (known) secret, # so these lines are commented out. Generate each with: docker run --rm authelia/authelia:4.39.28 authelia crypto rand --length 64 --charset alphanumeric # Signs the password-reset links. # AUTHELIA_IDENTITY_VALIDATION_RESET_PASSWORD_JWT_SECRET= # Encrypts the session data. It is only used when the session is stored in Redis, but Authelia refuses to start without it. Generate your own (see above). # AUTHELIA_SESSION_SECRET= # Encrypts the sensitive columns of the SQLite database (at least 20 characters). Do not lose it, and do not change it later without the CLI (authelia storage encryption change-key). Generate your own (see above). # AUTHELIA_STORAGE_ENCRYPTION_KEY=