Authelia - Free, Open Source, Self Hosted authorization and authentication for your web applications

Рет қаралды 58,606

Күн бұрын

Self hosting amazing open source software is the best feeling in the world. Knowing you're not tied to someone else's servers, whims, or quirks. The ability to control how you use your own apps, and how and when you add more is what open source is all about. But what about security?
I self host a lot of apps, and many of them don't have any built-in authentication. While that makes it quite convenient to use them, it also makes me a bit fearful of what others may be able to do with my applications and websites.
This is where Authelia comes in. Authelia provides a web application for authentication (make sure you are somone who should be using an application) and authorization (make sure you're permitted to use it) in front of your existing web applications.
=== Links ===
Shownotes
wiki.opensourceisawesome.com/...
- ‪@IBRACORP‬ Video
• Mastering Authelia Ins...
- Authelia Github page
github.com/authelia/authelia
- Docker, Docker-Compose, and NGinX Proxy Manager Install Scripts
github.com/bmcgonag/docker_in...
- Patreon - Support my channel
www.patreon.com/bePatron?u=23...
=== Timestamps ===
00:00 Beginning
00:09 Introduction to Authelia
03:05 Quick Demo of Authelia
03:50 Demo of 2-Factor with Authelia
05:50 Thank you to my Patrons at Patreon, and to my subscribers on KZfaq
06:15 Getting Authelia Installed
08:30 Installing Docker-CE, Docker-Compose, and NGinX Proxy Manager
12:50 NGinX Proxy Manager initial UI Setup
14:15 Setup the Authelia docker-compose file
17:20 Create the users_database.yml file
19:35 Hashing your user password
21:10 Create our Authelia configuration.yml file
34:40 Run your docker-compose for Authelia
36:00 Test our Authelia Install
37:05 Setup our Authelia Entry in NGinX Proxy Manager
41:00 Setup Site Entries in NGinX Proxy Manager for Authelia
=== Contact ===
Twitter: @mickintx
Telegram: @MickInTx
Mastodon: mastodon.partecipa.digital/ @MickInTX
Try out SSDNodes VPS Services! Amazing Specs for incredibly low costs. I'm running a 32 GB RAM / $ CPU Server for only $9 a month! Seriously. FOr long term server usage, this is the way to go!
www.ssdnodes.com/manage/aff.p...
Get a $50.00 credit for Digital Ocean by signing up with this link:
m.do.co/c/a6a61ae55242
Use Hover as your Domain Name Registrar to get some great control over you domains / sub-domains:
hover.com/SHPaiirr
Support my Channel and ongoing efforts through Patreon:
www.patreon.com/bePatron?u=23...
What does the money go to?
To Pay for Digital Ocean droplets, donations to open source projects I feature, any hardware I may need to purchase for future episodes (which I will then give to a subscriber in a drawing or contest).
=== Attributions ===
Intro and Outro music provided by www.bensound.com

Пікірлер: 130

@dmacaulay75 2 жыл бұрын

One of the best tutorials i've come across. Great details and great examples. Managed to get Authelia set up on a bunch of my selfhosted sites within an hour.

@AwesomeOpenSource 2 жыл бұрын

Glad it helped!

@antoniorobles998 2 жыл бұрын

WoW! I was thinking to ask you to please make a video about Authelia!!. Many many thanks. Awesome, as always.

@AwesomeOpenSource 2 жыл бұрын

You are welcome. Those mind reading classes are paying off. Hahaha. Enjoy!

@AhmadYusuf85 Жыл бұрын

Thanks for the detailed and informative video. When you add the code in the Advanced tab in npm, you can utilizie the internal nginx variables, this way, you can use the same template for all the hosts without the need to change anything. Below is an example: set $upstream_app $forward_scheme://$server:$port; proxy_pass $upstream_app;

@AwesomeOpenSource Жыл бұрын

Thanks for the info!

@franchise2570 2 жыл бұрын

Thank you so much Brian, awesome video. It took me awhile, but I finally put it all together. Thanks again man!

@AwesomeOpenSource 2 жыл бұрын

My pleasure, glad you stuck with it.

@iota347 Жыл бұрын

I really love your channel, super helpful and you don't skip ahead and stay with viewer, please keep making videos like these :)

@AwesomeOpenSource Жыл бұрын

I'll do my best. thank you for watching.

@chrisumali9841 2 жыл бұрын

Thanks for the demo and info, the scripts are awesome. Have a great day

@AwesomeOpenSource 2 жыл бұрын

My pleasure.

@SelfSufficient08 2 жыл бұрын

Thank you so much for doing this ! There are a good bit of how to’s for other reverse proxy’s and I was debating a change until I stumbled on yours. Thanks !

@AwesomeOpenSource 2 жыл бұрын

My pleasure.

@redetermine Жыл бұрын

Cool video, subscribed and looking forward to seeing your future uploads!

@AwesomeOpenSource Жыл бұрын

Thanks for the sub!

@Varian-Killbot 2 жыл бұрын

Wow, this is exactly what I was looking for!

@AwesomeOpenSource 2 жыл бұрын

Excellent! Hope it’s helpful!

@ErnestGWilsonII Жыл бұрын

Thank you for making this video and sharing it with all of us! I am of course subscribed with notifications turned on and thumbs up!

@AwesomeOpenSource Жыл бұрын

Thanks for subbing!

@mahmoudshihab 2 жыл бұрын

Wow! I didn’t even know that I could do something like this! Thank you so much!!!

@AwesomeOpenSource 2 жыл бұрын

My pleasure!

@mforrest85 Жыл бұрын

Thanks for setting the time zone for me! Nice tutorial.

@AwesomeOpenSource Жыл бұрын

Glad to help!

@seanhdka Жыл бұрын

a shame the weather's so good atm. you're channel is an amazing resource for me since i'm trying to decouple from big tech. you always pop up in my searches with lengthy guides and explanations. god speed!

@AwesomeOpenSource Жыл бұрын

Thank you. Enjoy that great weather, My videos will be here on the not so great days.

@iamlordking 2 жыл бұрын

love your channel and detailed tutorial. hope to see authentik tutorial in your channel. keep up the good work.

@AwesomeOpenSource 2 жыл бұрын

Been looking at Authetik, Keycloadk, and a few others for some future content.

@matthewblott 2 жыл бұрын

Outstanding work.

@AwesomeOpenSource 2 жыл бұрын

Thank you very much.

@MehrdadGivehchi Жыл бұрын

Great video and many thank!

@AwesomeOpenSource Жыл бұрын

Glad you liked it!

@ChristopherScanlan88 2 жыл бұрын

Nice quick overview.

@AwesomeOpenSource 2 жыл бұрын

I hope it was helpful.

@frnkdrvs 2 жыл бұрын

I love it!

@AwesomeOpenSource 2 жыл бұрын

Thank you!

@timvanrooijen3324 Жыл бұрын

Thanks it was helpfull!

@AwesomeOpenSource Жыл бұрын

Glad it helped!

@thefullstackworld 2 жыл бұрын

this is awsome thank you so much

@AwesomeOpenSource 2 жыл бұрын

My pleasure.

@atilayaksoy8993 2 жыл бұрын

Annnnd we are back with a new great video...

@AwesomeOpenSource 2 жыл бұрын

You know it!

@jamesnb 2 жыл бұрын

It is really well constructed, details tutorial, thank you! I am also looking for a guide to setup a database to work with Authelia (such as mysql) to manage users instead of the file. But thank you again

@AwesomeOpenSource 2 жыл бұрын

I'll see what I can do in a future video.

@samuelaqimaqima100 2 жыл бұрын

Hey Brian , Thanks Awesome content. Please do a Fineract

@AwesomeOpenSource 2 жыл бұрын

Let me run through it and see what I can figure out. Looks like it has a Docker-compose option already.

@kevinhughes9801 2 жыл бұрын

Good stuff thanks

@AwesomeOpenSource 2 жыл бұрын

You bet.

@PaPaTheGMan1215 2 жыл бұрын

Thanks for video, awesome (sic) as always. Have a newbie type question. I'm about to show my lack of IT security understanding, but how does this improve upon Nginx Proxy Manager's Access Lists? It is a very intricate and complex set up, and aside from the fact that it is fun and challenging, what type(s) of additional protection does it offer?

@AwesomeOpenSource 2 жыл бұрын

Not a newbie question at all. Yes, NPM has access lists, and you can and should use those where appropriate. There is no 2 factor with NPM auth however - which from a security standpoint is considered far more secure than single factor authentication 2 times. I also believe that as more applications get Auth capability with LDAP and / or OAuth, you'll see the ability to more tightly integrate something like Authelia with the application, and not just in front of it.

@jaygreentree4394 2 жыл бұрын

An easier way to copy from github files is to click the raw button on the right of the page. It gives you a text version without the line numbers.

@AwesomeOpenSource 2 жыл бұрын

Thanks for this, and I have started doing this more.

@whocares3132 Жыл бұрын

I am using free ddns pointed to my ip and subfolder ... how can I config authelia with nginx in this situation?

@verygoodbrother Жыл бұрын

In the advance tab of NPM, what ips go into set_real_ip_from? Are these just general subnets to capture all ips? If so will 0.0.0.0/0 be better?

@AwesomeOpenSource Жыл бұрын

That just sets the various private subnets. So you wouldn't want 0.0.0.0/0 in there. It's better to enter the private ip subnets there.

@sidneyking11 Жыл бұрын

I notice there is sql information in the docker-compose.yml shown in this video. I am running ubuntu 22.04 and run your script and it does not have any db information in it. has this changed for the 22.04 version of ubuntu? or do I need add that information in it?

@AwesomeOpenSource Жыл бұрын

If you mean for nginx-proxy-manager, then the application changed, and the maker removed the need for a sql db for that to work.

@jamesnb 8 ай бұрын

Hi there, I recently deployed a ubuntu 22.04 and am trying to reinstall the Authelia and NGINX. For NGINX proxy manager, it was fine. But Authelia has some significant change(s) that won't allow your configuration.yml file to perform successfully. Would you mind digging a bit and let me know if there is any part of the configuration.yml and the docker-compose.yml must make changes? By the way, the way to run docker-compose.yml has now becaome docker compose uo (no hyphen needed...). THANKS A MILLION

@AwesomeOpenSource 8 ай бұрын

I'll try to take a look. I've updated it in the past, but I've moved to Authentik as my SSO as it doesn't require quite so much heavy configuration through yaml files.

@calebbobby914 Жыл бұрын

Great Video, took me a couple attempts but i was able to get Authelia up and running. This might be a dumb question, but would you need to stop the container and run it again with the -d flag?

@AwesomeOpenSource Жыл бұрын

If you didn't run it with -d to start, then yes.

@ShlomiDavidson 2 жыл бұрын

Great tutorial, managed to get it working (I think). How do I know that Redis is managing the session? if I restart the Authelia container I don't need to login back again so that means Redis is doing it's job correctly?

@AwesomeOpenSource 2 жыл бұрын

That's a good question, but I actually don't know. I'd say it's a better question for reddit perhaps.

@vidx9 Жыл бұрын

How to get Authelia to work with applications that use programs to sync data, like Nextcloud or Bitwarden if they require authentication to access?

@AwesomeOpenSource Жыл бұрын

Instead of Authelia, you might need / want to look to something like Authentik. Check out the @cooptonian channel for a ton of Authentik info.

@Prime_Tecnologia_Automacao Ай бұрын

Excellent video, I put my Authelia to the test with it, but to make it part of my structure I need to resolve some situations. I can't get the NOVNC CONSOLE inside PROXMOX to work with NPM + Authelia... it always says connection. Has anyone found a solution they can share?

@ksrhinebolt Жыл бұрын

The nginx docker-compose.yml that is pulled in your script no longer comes with the mariadb config preloaded in it. It seems like nginx has removed it for whatever reason. It will have to be added manually unless it's no longer needed.

@AwesomeOpenSource Жыл бұрын

I removed it based on the project setup. I'm simply following what the project uses to try and keep up to date.

@rupeshshinde8941 Жыл бұрын

Great video. Do you have a tutorial for authelia on kubernetes?

@AwesomeOpenSource Жыл бұрын

No, sorry. I haven't dipped into Kubernetes just yet. I need to.

@itgeeky6313 2 жыл бұрын

What app are you using on your phone to get the MFA code?

@AwesomeOpenSource 2 жыл бұрын

I like FreeOTP if it's just for OTP, but generally I use my BitWarden app for OTP and Username and Password all together for various logins.

@k-gemas Жыл бұрын

how can i read login cookie information from authelia from another system. For example, I need to get the email value of the user logged in on authelia, what I am getting after logging in to authelia is just a cookie. Thanks you !

@AwesomeOpenSource Жыл бұрын

This is definitely a question more suitable for the Authelia team. You might go to their github page and ask this.

@erichb.1396 2 жыл бұрын

Hello, this is really a great tutorial. The first time I have (almost) managed to set up Authelia. My current problem is that after entering the login details in the Authelia window, the browser flashes briefly but there is no redirect to the app in question. Do you have a tip what the problem could be. Best regards, Eric

@AwesomeOpenSource 2 жыл бұрын

Not off the top of my head, but jump over to discuss.opensourceisawesome.com and send me a DM (@ mickintx) and I'll do my best to help you out.

@saadullahsajjad6172 Жыл бұрын

@@AwesomeOpenSource I'm having the same issue

@ceddytr7344 Жыл бұрын

Curious about this as well. Following these instructions and other instructions that are older and newer, I'm able to get the Authelia portal page active on my local network. However, credentials do not work. When I input my UN/PW, the logs show successful 1FA attempt, but I don't login, and I don't get any error for UN/PW being wrong.

@scubeedu2 Жыл бұрын

I'm having the same issue as well. Signing into Authelia works fine, but as mentioned, when trying to access an application through NGINX, the browser continues to load/re-load the app.

@afrosheenix Жыл бұрын

@@ceddytr7344 you and some others may be missing a critical few steps here. I just went through this so it might apply. After you've entered a new proxy host and dumped the config file into the advanced tab and saved it, you have to go back and modify the authelia config file to teach it about the sites, then bounce the authelia container so it reads the new config. It's as simple as opening /home/Configs/Authelia and editing the configuration.yaml file. FInd the access control section. Add your new proxy host and what type of auth you want it to use (there should be entries or examples already, super simple). Save the file, restart the authelia container. See what happens.

@kdouglas8410 2 жыл бұрын

I get to the last step of adding the json info to one of my services I want to access behind authelia. As soon as I input the json info in the advanced tab (changing the appropriate entries to reflect my settings and hit save. Nginx Proxy Manager appears to set the status of that service to OFFLINE. If I go back and remove everything from the advance tab and hit save, Nginx Proxy Manager sets it back to ONLINE. Can't seem to figure out whats went wrong with whats entered in the Advance Tab.

@AwesomeOpenSource 2 жыл бұрын

Interesting. I haven't seen that yet. Can you tell me what the service is you're setting up?

@AwesomeOpenSource 2 жыл бұрын

@Smoo Peezy Excellent info! I hope it will help others, and thank you for sharing.

@DavidCastillaGil 2 жыл бұрын

@Smoo Peezy yes that's it. If you ever come across this issue, you have to look for typos in your configuration, that's usually the cause. You can investigate this by checking the Nginx Proxy Manager docker logs. Everytime you save a config, Nginx parses it and will output an error for that specific host. If you are using subpaths in the locations tab, it can even stop nginx from working for all hosts! So this is quite important to know.

@HeneryH 10 ай бұрын

Thank you for your efforts. When doing my docker-up, I am getting i/o errors connecting to redis. I vaguely remember having similar troubles in some things because I am running ubuntu virtual machines as these hosts and there was something about being docker in vms and privileged mode. I'll keep investigating but if anyone has insight please let me know.

@AwesomeOpenSource 10 ай бұрын

This video is a bit old now, so things may have changed a bit. Please make sure to check the source for any updated compose files, etc. Sounds like you're doing that already.

@bouhisse5472 9 ай бұрын

just comment the redis part in configuration.yml and remove the redis container in the authelia yml docker compose file

@haydenc2742 Жыл бұрын

so awesome! I'm trying to build a cloudflare tunnel so I don't need to open ports...can't seem to get authelia and nginx working...it's killing me

@AwesomeOpenSource Жыл бұрын

Cloudflare can be a bit tempermental for sure. Make sure you're using the tunnel IPs for redirect, and so on inside the Authelia config and NPM advanced sections.

@Crystawth 2 жыл бұрын

Is it possible to use this without exposing the port on the host machine? For example, assigning it to a docker Network and just using the docker name instead of the IP address in the configuration

@AwesomeOpenSource 2 жыл бұрын

You should be able to do that, but I believe all sites you use this with will need to be on that same docker network for the redirect that happens before the authentication.

@Crystawth 2 жыл бұрын

@@AwesomeOpenSource would you mind or are you able to test it? I tried doing this and I kept getting a 500 internal server error

@Crystawth 2 жыл бұрын

@@AwesomeOpenSource I managed to get it working using the docker names. I must have missed something the first time around when i tried! Thanks for your hard work on these videos!

@fredzibulski3111 2 жыл бұрын

Love the Tutorial only did not get it to work. I have nginx already installed on my raspberry pi 4. Got already plenty docker containers. Not sure what I did wrong tried it 3 times to the tee. Can some one help ?

@AwesomeOpenSource 2 жыл бұрын

jump over to discuss.opensourceisawesome.com and post, and I'll be happy to try and help. You can use Google, Github accounts if you don't want to sign up for the Server.

@fredzibulski3111 2 жыл бұрын

@@AwesomeOpenSource thank you I will check it out

@fredzibulski3111 2 жыл бұрын

got it to work and love it

@hijiktaforever2565 Жыл бұрын

Hi , Thank you for the nice video it help a lot , I want to use authelia with remtely , when authelia is up and i try to use remtely the agent cant get the Id do you have any suggestion ? tky

@AwesomeOpenSource Жыл бұрын

The issue here is that Authelia is a block-point to th ewebsocket that the agent needs in order to connect all the way to remotely. The agent is essentially hitting the Authelia wall and not able to get through to remotely. So, nothing that I'm aware of that can be done here., but you might ask over on the Remotely github.

@hijiktaforever2565 Жыл бұрын

@@AwesomeOpenSource Thank you

@JanDemore Жыл бұрын

Awesome guide, been following and all good but I cant access to any host after adding the Advanced info. Hosts looks offline in NGINX and got this error in Chrome : ERR_SSL_UNRECOGNIZED_NAME_ALERT Can you assist please?

@AwesomeOpenSource Жыл бұрын

I've never run across that error, you may want to reach out to the authelia team and see if they can provide some help.

@JanDemore Жыл бұрын

@@AwesomeOpenSource solved , thanks

@AndreaBattista 10 ай бұрын

@@JanDemore i've the same error. How do you solved it?

@JanDemore 10 ай бұрын

Sorry but I can’t reminder, I think I I have edited something

@kareemschultz 2 жыл бұрын

Can you do a tutorial on keycloak?

@AwesomeOpenSource 2 жыл бұрын

I’ll take a look at it.

@teriyax 2 жыл бұрын

AWESOME Video! Loved it..... BUTTT Can you go in to depth on 2 things.... How to setup the 2factor OTP, AND then show a differnce between the NPM advanced authelia server config, and a service config for another external service.... say lidarr.... look forward to seeing your reply.

@AwesomeOpenSource 2 жыл бұрын

Bet I can. Let me work on it.

@teriyax 2 жыл бұрын

@@AwesomeOpenSource Awesome, Thank you. I figured out my issue with the advanced config, it was an oversight and neede to read the shownotes.... just having a side-by-side would have been nice to see.

@carlapr97 2 жыл бұрын

@@AwesomeOpenSource what app are you using to get the otp?

@AwesomeOpenSource 2 жыл бұрын

@@carlapr97 on iOS I was using FreeOTP for everything. I really like that one, but have been moving my personal stuff over to BitWarden lately as it’s all there together.

@carlapr97 2 жыл бұрын

@@AwesomeOpenSource thanks! do you know if the 6 digit code could be replaced with fingerprint/face ID, that would be really cool!

@80robina 2 жыл бұрын

Has anyone tried this with bitwarden

@AwesomeOpenSource 2 жыл бұрын

You can put this in front of bit warden, just remember it's not an integration, but an extra layer of protection.

@80robina 2 жыл бұрын

@@AwesomeOpenSource so as it's not an integration can I get authelia to do the 2fa instead of bitwarden

@gswhite 2 жыл бұрын

Really really fantastic overview and tutorial. First time I have been able to actually get authelia to spin up, However, I login fine with the credentials setup. I am then challenged to setup 2FA. When I click 'Register Device' to setup I get an error 'There was a problem initiating the registration process!' # Any Ideas anyone, so close but completely stuck now.

@AwesomeOpenSource 2 жыл бұрын

I haven't seen that issue, but my video is a bit older. I tried to update my yaml to some recent changes for the configuration file, but still may need some work. The @IBRACORP channel just did a great update to their Authelia video, and I highly recommend it as well. kzfaq.info/get/bejne/f71-rNN8l73ccmQ.html

@slcyberking 2 жыл бұрын

TFS

@AwesomeOpenSource 2 жыл бұрын

My pleasure.

@Konikitto 2 жыл бұрын

Your tutorial does not work anymore, you should mention this

@AwesomeOpenSource 2 жыл бұрын

Can you tell me what specifically you are having trouble with? I haven't had any issues with it.

@JavierVegaPerry 2 жыл бұрын

True, i did EVERYTHING checking all steps 3 times, doesnt work...this was a pain to setup and now im reading everything in the Authelia docs to figure out how to make this work. I'm getting to the auth page, but the 2FA doesnt work, the mail is delivered, but i cant register my 2FA device, docker logs are not helpful either.