Avoid Mistakes: How to Install and Configure Authelia Correctly

[@IBRACORP]

👮Thanks for watching! What did you guys think of Authelia this time around? Will you finally give it a try? Let us know in the comments or join us on Discord: discord.gg/VWAG7rZ

[@groto27]

Not sure. Can’t watch yet 😂

[@apscandy]

I'll tell you in 7 hours ahah

[@IBRACORP]

@Andrew Clarke Please do! 😅

[@IBRACORP]

No excuses mate comon

[@BenjaminSweetnam]

I'm already using it, thanks to you. But hey, what's with the release time? it's a bit late, isn't it

[@NahrAlma]

All the important videos linked? HELL YEAH. I'm currently setting up mariadb, I guess it will be a while until I actually get to authelia, but you are making it fun to follow these guides.

[@IBRACORP]

Great to hear! Thanks for the awesome feedback. Glad that you are enjoying the content ☺️

[@sfc-hoot]

For anyone watching this on Unraid 6.10+ I had trouble starting the redis container because it did not have root permissions to write to the app data folder. Before installing the container, (or after deleting the container+image and appdata/redis folder after finding an error) you need to open the unraid terminal and input the following: #go to appdata folder > cd /mnt/user/appdata #verify no redis appdata exists > ls #if no redis/ appdata exists, add redis folder with permissions for docker puid > sudo install -d -m 0755 -o 1001 -g 0 redis #verify redis folder created >ls #go to redis folder > cd redis #add bitnami folder with permissions for docker puid > sudo install -d -m 0755 -o 1001 -g 0 bitnami #verify bitnami folder >ls Then go reinstall the container and it should start. If you find directories already existing for redis and bitnami, remove them using `sudo rmdir bitnami` and `sudo rmdir redis` before using the install commands

[@Bryanluna1994]

Thanks so much you are a life saver

[@barrettphillips9364]

Worked for me. Thank you for the excellent instructions!

[@craigshinn7126]

Lifesaver. Thank you!!!

[@Andrew-em6mt]

I knew there was a reason for reading the comments first!!!!! Thank you, and thanks IBRACORP for another awesome video

[@cphelps777]

Lifesaver 👌

[@geyoda64]

openLDAP? yes please! I struggle getting any of that stuff to work (without a VM)

[@shroomzzz]

8 mins into the video, I've already had three homework assignments lol I wish I had taken my computer science studies more seriously in college. THANK YOU for taking the time to walk morons like me through this stuff!

[@leaf-]

Alright mate you got me. I've always been thinking about getting this running but this video has pushed me that bit extra. Will be setting it up tomorrow, thanks for the awesome video!

[@IBRACORP]

Finally got ya Leafy!! Enjoy mate if you need help to know where to find us

[@leaf-]

@@IBRACORP Yeah cheers mate. Everyone should check out the discord if they haven't already

[@coasterman6552]

Fantastic guide guys. I did struggle with the previous Authelia guide but this one nailed it. Feel far more confident about starting the final step of installing/config FreeIPA from your getting started with LDAP.

[@IBRACORP]

We love to hear that mate thank you for the feedback and for watching. If you get stuck join us in Discord anytime ✌️

[@AwesomeOpenSource]

Super terrific followup to your original video! Well done!

[@IBRACORP]

Thank you !

[@mattwells5625]

Another awesome video! Thank you. It would be great if you could update your Traefik documents to use the Cloudflare CDN wildcard certs instead of using lets encrypt for certs or have it as an option in the docs on setting it up that way.

[@DanielSchell86]

No matter how many times I try, I keep getting to a point where I'm getting 403 errors whenever I put the endpoint info in (I'm using NPM) and it is breaking my brain

[@JamesDurand_TinMan]

Just a quick note on hashing the password on the CLI, the way that was done in this video is _super_ risky as that command is now in the user's shell history which means someone could read that file and they now know all the passwords that you've generated in this way. It would be better to use something like `read -s ` to prompt for the password and write it to an environment variable and then put the environment variable into that Docker command. That way no passwords are getting saved in plain text.

[@IBRACORP]

Thanks for the tip!

[@unixweeb]

At the time of posting this allkeys generator from the docs is not available

[@DanielSchell86]

yeah the website just seems to not exist anymore

[@MrBond-rq3om]

Excellent video. Clearly explained all the basics to get started on soft soft. Thanks

[@bretholcombk6beh398]

Thanks so much for this tutorial! Got my Authelia Server up & working in no time.

[@IBRACORP]

That's what we love to hear! Thanks for watching Bret

[@darshanekbote8423]

Hey buddy , I still need help with the setup , could you please help me

[@sebastiaofernandes2372]

Amazing Guide! - you have shown how to use the YML file. Is there going to be a guide to show Openldap? or when are you going to update the documation to set up Openldap in unraid

[@IBRACORP]

Hi Sebastiao Fernandes, thank you for watching! We did OpenLDAP right here: docs.ibracorp.io/authelia/openldap 🙂

[@jonathans.8650]

Hype activated! So nice! 😍

[@drtrdr23]

Thanks for this i got everything working thanks to you guys

[@darshanekbote8423]

Hey buddy, I really need help with the setup, can you please help me

[@adfjasjhf]

Lovely tutorial. Will you do some tutorials for Always Free Oracle VPN with some apps like this? I think it's the best way to start learning selfhosting and configuration.

[@hawks5196]

Great idea!

[@MrSnyaify]

Not so good enough. To many problems with this. Especially with registration.

[@adfjasjhf]

@@MrSnyaify Honestly I registered without any problem on the first try from EU. Grabbed VPS in Germany and I have the maxed ARM based machine for free tier.

[@fulesmackofule]

What is this editor? Pretty cool!

[@dorkonviser9854]

Great guide! Thank you! Is it possible to make a short explanation of how to add Fail2Ban from Authelia? (They have an explanation but not for UNRAID and it is not easy to understand).

[@linusgrip6400]

Yes please do that! :)

[@jean-sebastienfrenette5169]

Do you have a guide for MFA using Authelia? Like Google Authenticator and such instead of password?

[@mwp4600]

I really like the music you use. Kind of matrix like.

[@CamStansell]

that is awesome. thanks mate and team.

[@dzablow]

Where was this video when I used my snowday 2 days ago to setup authelia?

[@IBRACORP]

It was still being worked on by our team of spider monkeys

[@metalgie]

I got this error from Redis logs (mkdir: cannot create directory '/bitnami/redis/data': Permission denied) how can i fix this?

[@nathanmcfarlane317]

Hi, love your videos, at least the few I have watched but I am already playing with OpenLDAP so keen for you to do the guide.

[@IBRACORP]

Cheers Nathan! We have the written version already Live at docs.ibracorp.io under Authelia if you were interested 🙂

[@jonathans.8650]

I will try it this time.

[@yannduranx]

Great tutorial. I always used to think what little I knew of Authelia was too complicated to warrant my time. I think this video has changed that! I also learned that it looks like I may have been pronouncing Redis wrong. I've been say "red-us" instead of "ree-dis". I also have one where I may be able to help out in return. For Adminer, you say "ad-my-na", whereas I think it may have been intended to be pronounced "ad-minna", as it it's an app to **admin** your database/users. So it's an ad-minna app to help you admin what needs to be admined. What do you think of my logic. One last thing, is there a photo of our dedicated host? I'd love to put an actual face to the voice. Is there somewhere we can see that?

[@IBRACORP]

You know Yann? I think your logic makes sense mate! By no means do I know how to pronounce everything as intended. Potato, tomato! Yes mate we are planning a video after 10K subs to introduce myself 🙂

[@chrismcmillon1577]

Meet with Redis regularly at work. Most of them say Redis, but they aren't picky about it. It was the first question I asked them.

[@Equality-and-Liberty]

Nice video. I love your step-by-step approach. Do you know how i can log out of an application if i use Authelia 1or 2 factor authentication to log in? I can log in but i can't log out since the app i use it for doesn't have a login method.

[@WaarpZor]

Thank you very much for this guide! Everything is working except the rules for internal IPs, i think it is because i use Cloudflare (i used your other guide for this too :P). In Authelia's logs, it seems to only see the Cloudflare IPs, not the real ones. If anyone got ideas to solve this, please let me know !

[@IBRACORP]

Depending on which reverse proxy you have you need to tell it pass through the original IP

[@WaarpZor]

@@IBRACORP i am using Nginx Proxy Manager with the entry point and end point script from your guides 😁

[@evanmarshall9498]

Stuck at redis setup. The appdata path is actualy included in this image now but I added /bitnami/ to the end since it is "/mnt/user/appdata/redis/" I have tried with and without "bitnami" at the end of the path and the container will not start. My logs keep giving me error: mkdir: cannot create directory '/bitnami/redis': Permission denied

[@carl_thunder]

Great video! For the endpoint, do I paste that configuration into the proxy for the service in question, advanced, custom Nginx configuration section?

[@IBRACORP]

Correct!

[@carl_thunder]

@@IBRACORP fabulous! You guys are awesome. Thanks again for the incredible content!

[@TacPanini8578]

So useful thank you! Ive now been shown how to buy a domain and set up subdomains for my various services i want exposed to the internet behind authelia through an argo tunnel. but how do i go about having my root domain address point to something? Right now it just defaults to a cloudflare bad gateway page. Be nice to even have it point to just some placeholder page or maybe even a hub to all the subdomains using something like heimdall somehow. I am not savvy enough to know how to do this however. thanks!

[@evanmarshall9498]

Can you show an example with say sonarr? I have followed this guide, added catch all rule to my domain and subdomains, but when I go to sonarr the authelia login screen does not show. Is there any configuration that needs to be done on the sonarr docker container maybe?

[@Fluxzone90]

How and where does Authentik from CA install to? I can't see it in appdata and I want to know if/how it would get backed up using CA Backup and Restore

[@Subasically]

If anyone has issues running redis and gets error "mkdir: cannot create directory '/bitnami/redis': Permission denied" You need to create the bitnami directory with correct permissions. Open the UnRaid terminal and type the follow commands, one line at a time. cd mnt/user/appdata sudo install -d -m 0755 -o 1001 -g 0 redis cd redis/ sudo install -d -m 0755 -o 1001 -g 0 bitnami

[@saltee8460]

Thank you so much.

[@cavepox]

Thank You!

[@digaum]

MVP

[@abdullahiahmed3895]

Video for putting your own softs on or is that possible. I can softbox so would like to up load my own softs.

[@fulesmackofule]

I came here for push notification configuration. Where can I find the API key in Duo? Thanks.

[@simonemastellonephotography]

Hi, i follow your guide to set up anthelia few month ago , but recently after an update the configuration file has changed and is not readable any more , i tried to apply the new changes but with no luck, can you please do an update

[@IBRACORP]

Hi Simone we're working on latest config file and hope to have it up soon. But we strongly suggest checking Authelia official GitHub as they have example config file always updated

[@simonemastellonephotography]

@@IBRACORP Tank you, i did but i have so many errors ,is crazy

[@jonirish323]

So I just walked through this process, and I think I have everything setup properly. However, when I try to go to the Authelia web UI, I get this error "There was an issue fetching the current user state" and the "loading" animated icon is the only thing displayed.

[@roderickvanrhyn2073]

I don't know what was happenning. I wound up having to remove autheila and all the endpoint protection from NGINX. I copied the config files to my computer for the time being. I was getting an error 500 (I think) from NGINX. NGINX worked after the removal of the advanced configs. This all started after upgrading container as requested by Unraid Rod My intentions is to reistall unraid and copy the config files into place where they were before the uninstall.

[@BCM-jz2uh]

The Website to generate 128 bit keys is down currently.

[@arathas1979]

thanks for the guide, once I got money I will signup to help you create more

[@VictorCaoCA]

@IBRACORP the all key generator is no longer in service. Is there a good alternative?

[@svsuryaa5521]

Thanks mate

[@iamthe7yearold587]

Hello. Do you think you could make a tutorial on how to set up a public minecraft server using the cloudflare tunnel? Thanks!

[@oldcrazyeye6482]

Likely can't. Most game servers require open ports regardless so tunneling them is kinda pointless

[@itdraak7531]

i can't get it to work because of an notification error, i get error 535 on smtp. normaly i use "Minder goed beveiligde apps en je Google-account" but that is disabled. dus anywane now an other way to get smtp to work?

[@ChadE1020]

if you are running into issue of " mkdir: cannot create directory '/bitnami/redis': Permission denied" on unraid 6.9+ delete the container and folders created for redis (won't work if folder exist) use the terminal and cd into the folder in my case its (/mnt/user/appdata) run sudo install -d -m 0755 -o 1001 -g 0 redis cd redis/ sudo install -d -m 0755 -o 1001 -g 0 bitnami and then reinstall the redis container something with the way unraid 6.9+ changed with container permission, giving the container privilege didnt work and this was a work around I found.

[@donza6261]

Thank you a lot

[@ChadE1020]

@@donza6261 happy it helped

[@markbarker289]

Ran into this as well, your suggestion got it going. Thank you!

[@rush_and_crush]

the website for generating 128Bit passwords is offline

[@DrDingus]

What is the Traefik Subdomain label for authelia? I didn't see that setup in your Traefik tutorial

[@IBRACORP]

Have you checked the documentation? It is covered in that.

[@Gex2501]

I had to change the path from being empty "" to "authelia"...right after the port in the configuration.yml (path: "authelia")

[@lincolngaudreau]

I've been having no end of troubles getting Authelia set up with the docker compose file whereas this video is using Unraid - is there a more detailed guide for using the compose file? The redis container is failing to start with 'exec /opt/bitnami/scripts/redis/entrypoint.sh: exec format error'

[@IBRACORP]

The written guide covers docker compose. Which platform are you trying to run this on? Sounds like maybe your trying to run it on an ARM device and I don’t believe bitnami has an ARM container build for redis

[@MR_GPU]

@@IBRACORP They don't, on my Pi I just removed Redis altogether.

[@khaliphathiane584]

I have setup authelia one factor is working but two factor doesn't. Is redis required for two factor?

[@IBRACORP]

Not 100% sure but since redis does store remembered information assume yes. E.g the remember me function may not work without redis either.

[@khaliphathiane584]

@@IBRACORP Thanks that makes sense. I can add device but when I pur the code I don't get redirected

[@DanielTolbertDev]

This is outdated now with the SWAG video... An update on how to use these with AUtoproxy would be pefect

[@shootinputin6332]

Adding a persistent volume for Redis causes Redis to not even start up. Logs "mkdir: cannot create directory '/bitnami/redis': Permission denied"

[@IBRACORP]

Create the directory first and apply permissions

[@shootinputin6332]

@@IBRACORP Thanks. I went a different way about it. Since the container successfully created the folder, I just went into the share and changed the folder permissions. It is great that you access a shares folders and files within the UnRaid webui now.

[@indrar359]

@@IBRACORP hi ibracorp, sorry for dumb question, but im still dont get it, what permission ? when i check /opt/appdata/redis is exist with root permission,

[@VictorCaoCA]

@@indrar359 When you first follow the directions, Unraid will create /mnt/user/appdata/redis/bitnami. From there, you should manually create from bitnami the following folders: redis/data. So the entire path will be /mnt/user/appdata/redis/bitnami/redis/data. When I inspect the logs of the docker image, the image tries to create the subsequent folder. (/bitnami/redis/data), but for whatever reason it can't so you have to do it manually.

[@sergey930]

I had the same issue, fixed it by setting permissions using Krusader, here is how: once Redis is installed, in Krusader right click on the "redis" folder >> Properties >> Permissions tab, in "Access Permissions" section set everything to "Can View & Modify Content".

[@enissay9950]

Please update your guide to include this fix to install error (taken from forum, but I cannot paste url, credits to sebz29a) Run these before installing redis in the web terminal > cd /mnt/user/appdata > install -d -m 0755 -o 1001 -g 0 redis > cd redis/ > install -d -m 0755 -o 1001 -g 0 bitnami

[@bobzeknob]

I get the following error when trying to install redis: "mkdir: cannot create directory '/bitnami/redis': Permission denied" Is anyone able to offer any assistance with overcoming this? Thanks

[@sufalofficial6772]

When I added the GMS it softed completely different than yours. Yours softed more like a real app, wNice tutorialle mine softed very

[@angelauditorerbs170]

great hack, thanks you

[@MR_GPU]

Hey, since the new update we now get this message: "Configuration: configuration key 'authentication_backend.disable_reset_password' is deprecated in 4.36.0 and has been replaced by 'authentication_backend.password_reset.disable': this has been automatically mapped for you but you will need to adjust your configuration to remove this message" Could the description and docs be updated to accommodate this?

[@IBRACORP]

Done 🙂

[@waddoo1234]

Unfortunately I got authelia setup and started without issue, until I received a 'request header too large' trying to reach the webpage. I disabled the email/smtp as I could not get gmail to work, but I assume that is unrelated.

[@drewgi7543]

Late reply but you can try to clear your cookies for your server in general and that should help :)

[@pedritounodos]

I opened up a new project and deleted the area where you "paint" the soft and I don't know how to make it co back!! Lol

[@egetasel3909]

Türkçe altyazıyı koyan kişinin eline sağlık ö-ö-ö-ö-ö-ö-ö-ö-öptüm bayy, gö-gö-gö-gö-gö-gö-gö-gö-gömmdüm say

[@trix4462]

You never know how much you have in common with so people.

[@abderrahmanesarir2562]

i followed step by step, but got this error , level=error msg="Failure running the storage provider startup check: the encryption key is not valid against the schema check value"

[@IBRACORP]

Sounds like maybe you changed the encryption key? Once you have encrypted the data with one key, your not easily able to then change the key to something else

[@OwsleyLaws71]

Am I crazy or is the Unraid password hash command missing?

[@meccu19]

But how to use it with SWAG? Nice guides, but hard to link with spaceinvader guides

[@IBRACORP]

We do things differently 🙂

[@meccu19]

@@IBRACORP any chance if you can publish one docker template in community apps ? For small donation )) I am dumb, don’t know how setup it myself

[@graiden]

But is there any advantage on this over using it directly with SWAG?

[@IBRACORP]

Not sure what you mean by this? It can be used with SWAG or any other reverse proxy that is supported

[@chunkster29]

Hi im getting the following error when trying to setup freeipa with autherlia time="2022-09-23T04:28:53+01:00" level=fatal msg="The following providers had fatal failures during startup: user" can't find any help online

[@chunkster29]

all sorted required extra dc= for co.uk

[@daburger638]

@@chunkster29 where did you put your fix in the configuration file for this error? I currently have 2 errors. The one you faced above and the one below. Did you ever experience the below error as well? time="2023-10-14T23:30:01-07:00" level=error msg="Failure running the user provider startup check: error reading the authentication database:"

[@indrar359]

followed you tutorial step by step, still got error level=error msg="Configuration: storage: option 'encryption_key' must is required" level=fatal msg="Can't continue due to the errors loading the configuration" i did using more than 20 char to encryption_key in storage section, did i miss something ? ----- edit ----- so i did some misconfiguration, somehow container authelia still using template configuration, so i just copy the real configuration to /opt/appdata/authelia

[@antonio638]

you need to add: ecryption_key: a-super-long-key right under: storage:

[@IBRACORP]

Check out our written guides, they are always kept up to date. It’s hard to keep videos up to date with the bleeding edge updates

[@ra1k_0]

Nice

[@IBRACORP]

Thanks

[@gracemina4528]

Doesn’t tNice tutorials program cost like 100$ ?

[@bigtonyravioli]

Word to the wise. This video is outdated and for something like Authelia, you should REALLY read their actual documentation and work through the configuration yourself. It isn't hard to understand if you just go through everything item-by-item. You probably should not be setting up your own authentication/SSO if you can't do that as a bare minimum. Sidenote: shoutout to LLDAP for being a dead-simple LDAP solution that works with Authelia!

[@porshatalks]

how do i generate the storage key?

[@IBRACORP]

You create it yourself, you can use this tool: www.allkeysgenerator.com/

[@ljakeupl]

Step one, get a CS degree at the university of your choosing! I just want some authentication when accessing my web apps remotely without needing a vpn. How does that require hours of tutorials on installing multiple things and configuring yaml files?

[@lukascpu]

I'll shoot question here - why mariadb and redis? For small deployment I might consider redis but mariadb is overkill, if someone runs this for home lab - means 1-3 users only gain from using mariadb/redis is statelessness and that's it... Previous tutorial was better in that case as it was separated - small deployment = sqlite/file backend and large deployment = ldap/mariadb/redis

[@kshexpress4117]

SO link is given below!!!

[@twitch.sae7]

Tutorial*

[@darshanekbote8423]

Anyone who has accomplished this video successfully, please do reply me, Im still struggling. Thank you

[@jasonsell7172]

You are not the only one. This is my 3rd video on it and I keep getting to the point where I should be able to load the initial page and all I get is "request header too large"

[@ak137lg]

@@jasonsell7172 oh thank god thats exactly what im getting any luck so far? Edit: nvm i think its a chrome issue. I just tried Edge and its working fine

[@Lonnie.G]

@@ak137lg you just saved me. was so frustrated but simply tried a different browser and it works! edit: i think the real issue is too many cookies for the domain in question (in my case just my server IP) causes the header to be too large. clearing cookies would likely fix it without switching browsers too though I didn't test that

[@bluesquadron593]

My comments keep disappearing...

[@hawks5196]

KZbin is really bad for that!! What are you trying to comment?

[@bluesquadron593]

@@hawks5196 well, seems my answer is not appearing answering to your question either. Very strange.. I only used legit words..

[@IBRACORP]

Sorry to hear mate. KZbin is terrible with comments. If only people knew how many get auto deleted. It's a real problem

[@physicsguy1240]

Do the basics first, if it would be easy, everyone would do it

[@alejandromunozdelacruz9598]

tho

[@Stopinvadingmyhardware]

What?

[@IBRACORP]

Hello?

[@hawks5196]

Where?

[@Ruuustyy_]

when i use the CLI "Docker run --rm authelia/authelai:latest authelia hash-password 'yourpassword' " it returns with error: unknown command "hashpassword" for "authelia"

[@soana65]

Same here. Error: unknown command "hash-password" for "authelia" BTW the following command worked for me: $ docker run authelia/authelia:latest authelia crypto hash generate argon2 --password 'password'

[@Ruuustyy_]

@@soana65 okay thank you I'll give that a try when I am free