Apps / Security
Authelia
The Single Sign-On Multi-Factor portal for web apps. OpenID Certified and Post-Quantum Cryptography Ready.
Authelia is an open-source authentication and authorization server providing two-factor authentication and single sign-on (SSO) for your applications via a web portal. It acts as a companion for reverse proxies by allowing, denying, or redirecting requests.
CategorySecurity
Memory~120MB
Module
autheliaInstalling it
Open the dashboard, go to Apps, press Add on it and apply the change. Or from a terminal on the box:
sudo homebox install autheliaWhere to open it
| Service | Port | First login |
|---|---|---|
| Authelia | :9091 | Signs in as admin with the password Podhouse generated at install, then asks you to enrol a second factor. |
Open it at your box's address with that port — the dashboard links to it directly once it is running.
Good to know
- It protects nothing on its own. The proxy has to be told to ask it — in Nginx Proxy Manager that is an advanced config block forwarding to /api/verify
- Cookies are scoped to a domain, so this needs a real hostname. It cannot work on an IP address, which is why the install stops until Domain is set
- The first account is created at install with a generated password:
homebox secrets autheliaprints it. Register a TOTP app on the first login - Second factor codes are emailed by default, and without a mail server configured that email is written to a file in the config directory instead