Add internal Traefik ingress for Pangolin and Authelia

identity/authelia/configuration.yml.example

@@ -22,9 +22,24 @@ authentication_backend:
 access_control:
   default_policy: deny
   rules:
-    - domain:
-        - '*.paccoco.com'
+    - domain: auth.paccoco.com
+      policy: bypass
+    - domain: gitea.paccoco.com
       policy: one_factor
+      subject:
+        - group:admins
+    - domain: grafana.paccoco.com
+      policy: one_factor
+      subject:
+        - group:admins
+    - domain: dns.paccoco.com
+      policy: one_factor
+      subject:
+        - group:admins
+    - domain: traefik.paccoco.com
+      policy: one_factor
+      subject:
+        - group:admins
 
 session:
   secret: 'CHANGE_ME_SESSION_SECRET'

identity/authelia/users_database.example.yml

@@ -2,7 +2,11 @@ users:
   john:
     disabled: false
     displayname: John
-    email: john@paccoco.com
-    password: "$argon2id$v=19$m=65536,t=3,p=4$REPLACE$ME"
+    email: john@example.com
+    password: '$argon2id$v=19$m=65536,t=3,p=4$REPLACE$REPLACE'
     groups:
       - admins
+      # future examples:
+      # - infra
+      # - media
+      # - family