Apps / Security
Authelia
One door, with two locks
An authentication gateway that sits in front of your other apps through the proxy. Half the things in this catalog have no login at all, and several hand admin to whoever opens them first — Authelia puts a single sign-on page with two-factor in front of all of them, so exposing one does not mean exposing it to everyone.
CategorySecurity
Memory~120MB
Module
autheliaInstalling it
Open the dashboard, go to Apps, press Add on it and apply the change. Or from a terminal on the box:
sudo homebox install autheliaWhere to open it
| Service | Port | First login |
|---|---|---|
| Authelia | :9091 | Signs in as admin with the password Podhouse generated at install, then asks you to enrol a second factor. |
Open it at your box's address with that port — the dashboard links to it directly once it is running.
Good to know
- It protects nothing on its own. The proxy has to be told to ask it — in Nginx Proxy Manager that is an advanced config block forwarding to /api/verify
- Cookies are scoped to a domain, so this needs a real hostname. It cannot work on an IP address, which is why the install stops until Domain is set
- The first account is created at install with a generated password:
homebox secrets autheliaprints it. Register a TOTP app on the first login - Second factor codes are emailed by default, and without a mail server configured that email is written to a file in the config directory instead