0 views
Read
#0
Learn Authelia - Pre-Requisite Skills & Environment Setup
Before securing your first service with Authelia, make sure the foundation is ready: basic reverse proxy skills, HTTP headers, authentication versus authorization, forward authentication and session management, plus Docker setup, a domain with subdomains, and the lab topology that will be used throughout this series.
August 3, 2026
00
Read
#1
Learn Authelia - History, Background & Why You Need Authelia
Exploring the problem of many applications with many separate login systems, the birth of Authelia in 2016 as a lightweight forward authentication server focused on SSO and MFA, up to an honest comparison with Authentik, Keycloak, oauth2-proxy, and basic auth.
August 3, 2026
00
Read
#2
Learn Authelia - Architecture & Core Concepts
Dissecting Authelia's architecture: the Go server, configuration.yml, Redis session storage, user database, storage backend, and notifier, then following the end-to-end authentication flow from a browser request to the session cookie, plus key terms like access control and policy.
August 3, 2026
00
Read
#3
Learn Authelia - Installing Authelia
Installing Authelia with Docker Compose: assembling the Authelia, Redis, and database stack, creating a minimal configuration, managing secrets through the .env file, then running and verifying the Authelia portal on port 9091.
August 3, 2026
00
Read
#4
Learn Authelia - Configuration File Structure
Dissecting the configuration.yml structure from theme, jwt_secret, and default_redirection_url to access_control, session, regulation, storage, notifier, and authentication_backend, complete with authelia validate-config validation and secret management through environment variables.
August 3, 2026
00
Read
#5
Learn Authelia - Authentication Backends
Choosing and configuring Authelia's authentication backend: the file backend with users_database.yml and argon2id passwords for homelabs, and the LDAP backend for organizations that already have OpenLDAP or Active Directory.
August 3, 2026
00
Read
#6
Learn Authelia - Access Control Rules
Understanding access control in Authelia: default_policy as a safety net, rules with domain, subject, resources, methods, and networks criteria, and the first match wins evaluation order for applying bypass, one_factor, and two_factor policies.
August 3, 2026
00
Read
#7
Learn Authelia - Session Management
Understanding session management in Authelia: cookie configuration with name, domain, and validity, session storage in Redis for production scale, and cookie security aspects like Secure, SameSite, and HttpOnly so sessions are hard to hijack.
August 3, 2026
00
Read
#8
Learn Authelia - Storage Backend
Understanding Authelia's storage backend that holds permanent data like TOTP secrets and WebAuthn credentials: choosing between SQLite, MySQL, and PostgreSQL, configuring it in configuration.yml, running schema migrations, and backup strategies so users don't lose their MFA devices.
August 3, 2026
00
Read
#9
Learn Authelia - TOTP (Time-based One-Time Password)
Understanding TOTP as Authelia's second method: how the time-based six-digit code works per RFC 6238, issuer and period configuration, the QR code enrollment process, the role of backup, up to generating TOTP keys via the CLI.
August 3, 2026
00