# Authelia Authelia is an open-source authentication and authorization server that provides login, multi-factor authentication, and single sign-on for web applications. It is open source and self-hosted, installable on Docker Hub, Kubernetes (Helm), Proxmox, TrueNAS and Unraid. Canonical page: https://ourlocalhost.com/app/46/authelia ## Description Authelia is an open-source authentication and authorization server that provides login, multi-factor authentication, and single sign-on for web applications. It works with reverse proxies such as nginx, Traefik, or HAProxy to verify users before requests reach services. Self-hosted users can use it to centralise access to their applications and reduce the number of separate passwords to manage. ## Platform availability Available on 4 of 9 platforms: Unraid, TrueNAS, Proxmox, Helm. ## Health score 78/100 (Good), based on 5 of 5 factors. - Maintained: 100 (last commit 17 days ago) - Popular: 89 (29,189 GitHub stars) - Easy to install: 65 (4 install platforms, install notes, Docker image) - Light to run: 95 (512 MB minimum RAM, runs on ARM) - Security check: 20 (1 serious finding, 7 minor, CI, tests, OpenSSF Scorecard 9.6/10) ## Security check 1 serious finding: A private key is committed in the source code. Automated checks on commit a4aec2d, 12 Oct 2026. Not an audit. ## Links - Documentation: https://docs.ibracorp.io - Docker Hub: https://hub.docker.com/r/authelia/authelia/ - Kubernetes (Helm): https://artifacthub.io/packages/helm/authelia/authelia - Proxmox: https://community-scripts.github.io/ProxmoxVE/scripts?id=authelia - TrueNAS: https://apps.truenas.com/catalog/authelia/ - Unraid: https://ca.unraid.net/apps/authelia-13wm4jn06knsbb?q=Authelia - Official website: https://www.authelia.com ## Common questions ### Which port should my reverse proxy point to for Authelia? Point your reverse proxy to Authelia's API port, which defaults to 9091. That port serves the login and authentication endpoints. ### How should I persist Authelia's Docker configuration? Mount a persistent Docker volume for /config, such as ./data/authelia/config:/config. If you skip this, the container may start with default settings and you can lose configured users, secrets, or access rules. ### How do I control which apps require login? Set access_control rules for your real domains and paths. These rules decide which apps require login and which one-factor or two-factor policy applies. ### What second-factor methods does Authelia support? Authelia supports FIDO2/WebAuthn security keys, time-based one-time passwords, and Duo mobile push notifications. It also supports passwordless authentication via WebAuthn passkeys. ### Can Authelia be configured for high availability? Authelia can be made highly available by using a remote database and Redis as a highly available key-value store. ## Alternatives - Auth0: You can connect any application (written in any language or on any stack) to Auth0 and define its Connection, the method used to authentica… - FusionAuth: FusionAuth is an auth for any app. - Keycloak: Keycloak is an open-source Identity and Access Management platform for adding authentication to self-hosted applications. - Okta: Okta's Workforce and Customer Identity Clouds enable secure access, authentication, and automation—putting identity at the heart of busines… - SuperTokens MySQL: SuperTokens is an open-source, self-hosted user authentication server that adds secure login and session management to your apps. - Tinyauth: Tinyauth is a lightweight OpenID Connect authentication and authorization server that adds login and access controls to self-hosted apps be… - VoidAuth: VoidAuth is an open-source authentication platform for self-hosted applications. - ZITADEL: Zitadel is an open-source identity and access management platform that provides authentication, single sign-on, multi-factor authentication… - authentik: Authentik is an open-source identity provider that adds flexible single sign-on, user management, and common sign-in protocol support to se… - casdoor: Casdoor is an open-source, self-hosted identity and access management platform that centralizes single sign-on, authentication, and authori… - pocket-id: A simple OIDC provider that allows users to authenticate with their passkeys to your services. - pomerium: Pomerium is an identity-aware reverse proxy that adds authentication and access control to internal web applications, even those without bu… --- Source: Our Local Host (https://ourlocalhost.com/app/46/authelia), the self-hosted and open-source app directory.