From 6a27814f85a1a6bd7b9a5c58a363ef84604a320b Mon Sep 17 00:00:00 2001
From: L4RM4ND <21357789+l4rm4nd@users.noreply.github.com>
Date: Thu, 2 Mar 2023 19:42:02 +0100
Subject: [PATCH] improve security; add redis authentication

---
 examples/authelia/config/configuration.yml | 2 +-
 examples/authelia/docker-compose.yml       | 1 +
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/examples/authelia/config/configuration.yml b/examples/authelia/config/configuration.yml
index d5b084b..c5b197b 100644
--- a/examples/authelia/config/configuration.yml
+++ b/examples/authelia/config/configuration.yml
@@ -57,7 +57,7 @@ session:
     host: authelia-redis
     port: 6379
     # This secret can also be set using the env variables AUTHELIA_SESSION_REDIS_PASSWORD_FILE
-    # password: authelia
+    password: SuperSecureRedisAuthPassword # must be the same as in the docker-compose.yml defined for the redis services
 
 regulation:
   max_retries: 3
diff --git a/examples/authelia/docker-compose.yml b/examples/authelia/docker-compose.yml
index c5e3d6c..191c343 100644
--- a/examples/authelia/docker-compose.yml
+++ b/examples/authelia/docker-compose.yml
@@ -24,6 +24,7 @@ services:
   redis:
     image: redis:alpine
     container_name: authelia-redis
+    command: redis-server --requirepass SuperSecureRedisAuthPassword # also reflect this in the authelia config file
     volumes:
       - ${DOCKER_VOLUME_STORAGE:-/mnt/docker-volumes}/authelia/redis:/data
     networks: