this post was submitted on 24 Oct 2023
2 points (100.0% liked)

Self-Hosted Main

504 readers
1 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

For Example

We welcome posts that include suggestions for good self-hosted alternatives to popular online services, how they are better, or how they give back control of your data. Also include hints and tips for less technical readers.

Useful Lists

founded 1 year ago
MODERATORS
communick@selfhosted.forum
2
Questions about Traefik and Authentik / Authelia (alien.top)
submitted 1 year ago by Azsde@alien.top to c/main@selfhosted.forum
6 comments fedilink hide all child comments
 

Hello everyone,

I have a Traefik installation and I wish to increase the security of my setup.

I plan to deploy a crowdsec bouncer, but I also have stumbled upon Authentik and Authelia, and I am not sure I totally understand their purpose.

From what I understand, those services would allow to only allow Traefik to redirect the user to the appropriate service if correctly authenticated, is that correct?

Also, using either Authentik or Authelia, user can use SSO to register/login ? How can I control who can register?

Finally, assuming my understanding of those services is correct, I suspect that using a web browser to access the services, the login UI will be prompted, but what if I use a mobile application? For instance I use immich to backup my pictures, so in the immich mobile app server settings I have : immich.mydomain.com, how would that works out if I use either Authentik or Authelia?

I thank you in advance for your answers.

you are viewing a single comment's thread
view the rest of the comments
[โ€“] Wojojojo90@alien.top 1 points 1 year ago (1 children)

Then, you have to authenticate against Authelia/Authentik and a second time at the service via username and password usually.

FYI that at least in Authentik you can avoid the second login. Check the instructions they have on setting up Sonarr for more details, but you can save the app credentials in Authentik, then if your identity is authorized for access Authentik will automatically attach the credentials for the app: https://goauthentik.io/integrations/services/sonarr/

Works for anything that has http basic auth

[โ€“] sk1nT7@alien.top 1 points 1 year ago

Nice thanks!