@lamalibre/create-portlama 1.0.10 → 1.0.11

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lamalibre/create-portlama",
-  "version": "1.0.10",
+  "version": "1.0.11",
   "description": "One-command setup for secure reverse tunnels with a management dashboard",
   "type": "module",
   "license": "MIT",

package/vendor/panel-server/src/lib/authelia.js

@@ -220,7 +220,13 @@ export async function writeAutheliaConfig(domain, secrets) {
     session: {
       name: 'portlama_session',
       secret: sessionSecret,
-      domain,
+      cookies: [
+        {
+          domain: domain,
+          authelia_url: `https://auth.${domain}`,
+          default_redirection_url: `https://auth.${domain}`,
+        },
+      ],
       expiration: '12h',
       inactivity: '2h',
     },
@@ -450,6 +456,20 @@ export async function updateAccessControl(sites) {
     throw new Error('Authelia configuration is empty or invalid');
   }
 
+  // Migrate session config from old format (session.domain) to new format (session.cookies)
+  // needed for Authelia 4.38+
+  if (currentConfig.session && currentConfig.session.domain && !currentConfig.session.cookies) {
+    const oldDomain = currentConfig.session.domain;
+    currentConfig.session.cookies = [
+      {
+        domain: oldDomain,
+        authelia_url: `https://auth.${oldDomain}`,
+        default_redirection_url: `https://auth.${oldDomain}`,
+      },
+    ];
+    delete currentConfig.session.domain;
+  }
+
   // Build access_control rules from protected sites.
   //
   // Authelia evaluates rules top-to-bottom, first match wins.

package/vendor/panel-server/src/lib/nginx.js

@@ -190,7 +190,7 @@ export async function writeAppVhost(subdomain, domain, port, certPath) {
     # Authelia forward authentication
     location /authelia {
         internal;
-        proxy_pass http://127.0.0.1:9091/api/verify?rd=https://auth.${domain}/;
+        proxy_pass http://127.0.0.1:9091/api/authz/forward-auth;
         proxy_pass_request_body off;
         proxy_set_header Content-Length "";
         proxy_set_header X-Original-URL $scheme://$http_host$request_uri;
@@ -318,7 +318,7 @@ export async function writeStaticSiteVhost(site, certDir, domain) {
     # Authelia forward authentication
     location /authelia {
         internal;
-        proxy_pass http://127.0.0.1:9091/api/verify?rd=https://auth.${domain}/;
+        proxy_pass http://127.0.0.1:9091/api/authz/forward-auth;
         proxy_pass_request_body off;
         proxy_set_header Content-Length "";
         proxy_set_header X-Original-URL $scheme://$http_host$request_uri;