inventory.example.yml

all:
  hosts:
    example.com:
      ansible_user: ubuntu
      ansible_ssh_private_key_file: ~/.ssh/my-private.key
      host_name: example.com
      ubuntu_dist_codename: jammy
      ubuntu_arch: amd64
      timezone: Europe/Berlin # OPTIONAL
      traefik_basic_auth:
        - user: user1
          password: pass1
        - user: user2
          password: pass2
      traefik_ssl_email: me@example.com
      authelia:
        jwt_secret: a_very_important_secret
        default_redirection_url: https://auth.example.com
        totp:
          issuer: example.com # OPTIONAL, fallbacks to: host_name
        session:
          secret: strong_64_char_secret
          domain: example.com # OPTIONAL, fallbacks to: host_name
        storage:
          encryption_key: you_must_generate_a_random_string_of_more_than_twenty_chars_and_configure_this
        access_control: # OPTIONAL
          rules:
            - domain: public.example.com
              policy: bypass
            - domain: convenience.example.com
              policy: one_factor
            - domain: very-important.example.com
              policy: two_factor
        notifier:
          smtp:
            username: smtp_username
            password: smtp_password
            host: mail.example.com
            port: 25
            sender: noreply@example.com
        users:
          - username: admin
            displayname: Administrator
            password: "$argon2id$v=19$m=65536,t=3,p=4$jb8H0GOiMZpKC8QaJm7pGg$Qo2FhjXmBWLJPE7cmXiKe+W4CTG2begUrabajTB/jfQ" # Password is authelia
            email: admin@example.com
            groups:
              - admins
              - dev
          - username: dev
            displayname: Developer
            password: "$argon2id$v=19$m=65536,t=3,p=4$jb8H0GOiMZpKC8QaJm7pGg$Qo2FhjXmBWLJPE7cmXiKe+W4CTG2begUrabajTB/jfQ" # Password is authelia
            email: dev@example.com
            groups:
              - dev