From 12773c7fd2207af8a8b13da44557f9663f33a946 Mon Sep 17 00:00:00 2001
From: "Dustin C. Hatch" <dustin@hatch.name>
Date: Mon, 11 Dec 2023 10:36:10 -0600
Subject: [PATCH] authelia: Restrict access to paperless-ngx

Since all Paperless-ngx users see the same content, we should restrict
who can log in.
---
 authelia/configuration.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/authelia/configuration.yml b/authelia/configuration.yml
index a3b1a0f..b78e200 100644
--- a/authelia/configuration.yml
+++ b/authelia/configuration.yml
@@ -8,6 +8,10 @@ access_control:
   rules:
   - domain: paperless.pyrocufflink.blue
     policy: two_factor
+    subject:
+    - 'group:Paperless-ngx Users'
+  - domain: paperless.pyrocufflink.blue
+    policy: deny
   - domain: firefly.pyrocufflink.blue
     resources:
     - '^/api/'