From 0ad63e06138ea353f7fb14d1f16681334bf84879 Mon Sep 17 00:00:00 2001
From: "Dustin C. Hatch" <dustin@hatch.name>
Date: Fri, 16 Feb 2024 20:41:47 -0600
Subject: [PATCH] authelia: Allow anonymous access to AlertManager

Sometimes, I want to be able to look at active alerts without logging
in.  This rule allows read-only access to the AlertManager UI and API.
Unfortunately, the user experience when attempting to create a new
Silence using the UI without first logging in is suboptimal, but I think
that's worth the trade-off.
---
 authelia/configuration.yml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/authelia/configuration.yml b/authelia/configuration.yml
index c537fa1..ecf6434 100644
--- a/authelia/configuration.yml
+++ b/authelia/configuration.yml
@@ -36,6 +36,16 @@ access_control:
     networks:
     - internal
     policy: bypass
+  - domain: metrics.pyrocufflink.blue
+    networks:
+    - internal
+    resources:
+    - '^/alertmanager([/?].*)?$'
+    methods:
+    - GET
+    - HEAD
+    - OPTIONS
+    policy: bypass
 
 authentication_backend:
   ldap: