authelia-and-caddy-integration.md

aliases	category	classification	date	date_modified	draft	id	image	links	local_archive_links	pinned	print	series	tags	title	type
authelia-and-caddy-integration	authelia	public	2023-01-11 11:46:11 -0800	2023-01-11 11:46:11 -0800	false	20230111194611				false	false		authelia caddy security login authentication	Authelia & Caddy Integration	tech-note

((TOC))

Helpful Links

• Authelia Tutorial - Protect your Docker Traefik stack with Private MFA | SHB
• Caddy - Integration - Authelia
• Docker - Integration - Authelia
• Forwarded Headers - Integration - Authelia
• authelia/config.template.yml at master · authelia/authelia
• forward_auth (Caddyfile directive) — Caddy Documentation
• reverse_proxy (Caddyfile directive) — Caddy Documentation

Enable Authelia on a Caddy Site

handle @log {
    forward_auth localhost:9091 {
        uri /api/verify?rd=https://auth.int.ppn.sh
        copy_headers Remote-User Remote-Groups Remote-Name Remote-Email
    }
    reverse_proxy 10.19.90.20
}

File Based User Database

users:
  usera:
    disabled: false
    displayname: <display-name>
    password: <hashed-password>
    email: <email>
    groups:
      - admins
  userb:
    disabled: false
    displayname: <display-name>
    password: <hashed-password>
    email: <email>
    groups:
      - admins

Hash a Password

# https://www.authelia.com/reference/guides/passwords/#passwords
docker exec -it <container-name> authelia hash-password