Skip to content

Danger Zone

Description / nameInput element
Name of the role

Override patterns that are not officially supported and may compromise the security or stability of your setup. Proceed at your own risk.

Authelia App Bypass

Some users may not want the additional layer of security that Authelia provides. An override is available to disable the middleware on a per-app basis:

Before continuing, ensure that fallback measures are in place to prevent unauthorized access to any of your apps.

### Authelia App Bypass ###
sonarr_traefik_sso_middleware: ""

To determine which apps are included in Authelia by default, you can run this command:

grep -Ril '_traefik_sso_middleware: "{{ traefik_default_sso_middleware }}"' /srv/git/saltbox/roles /opt/sandbox/roles | awk 'BEGIN{RS="roles/"; FS="/defaults"}NF>1{print $1}' | sort -u

Should you wish to enable Authelia on an application that did not previously use it you do something similar as above but use a different value to enable it:

sonarr_traefik_sso_middleware: "{{ traefik_default_sso_middleware }}"

It should be noted that we take care of whitelisting any API endpoints when enabling Authelia for you so ask on the discord if you have trouble with enabling Authelia on an application that needs to have its API whitelisted and the below example isn't enough.

sonarr_traefik_api_enabled: true
sonarr_traefik_api_endpoint: "PathPrefix(`/api`) || PathPrefix(`/feed`) || PathPrefix(`/ping`)"

Authorize with App Credentials

Inject an Authorization header - Traefik performs basic auth with the backend app

This will allow you to keep basic auth enabled within apps while avoiding the hassle of entering the credentials manually. The authorization header is only inserted if the request is authorized through the SSO middleware (Authelia) and is not applied to the API endpoint(s).

You can use this tool to generate the header contents based on your credentials.

sonarr_docker_labels_custom:
  traefik.http.middlewares.appAuth.headers.customrequestheaders.Authorization: "Basic <base64 header>"
sonarr_traefik_middleware_custom: "appAuth"

Plex Shared Data

#### Shared metadata between all Plex instances ####
#### Presumes one of the instances is named `plex` ####
plex_role_docker_volumes_custom: "{{ [] if plex_name == 'plex' else
                                     [plex_paths_application_support_location + '/Media:/config/Library/Application Support/Plex Media Server/Media:ro',
                                      plex_paths_application_support_location + '/Metadata:/config/Library/Application Support/Plex Media Server/Metadata:ro'] }}"