Authenticate & Authorise Everything with Authelia

[@XCyborgX29]

Your videos have helped me so much. I've been putting off setting up traefik,crowdsec, and authelia. You have made things so much easy. Your explanation is top tier. thanks for all the work that you do!

[@Jims-Garage]

Really appreciate the kind feedback, thanks 👍

[@fulesmackofule]

You are talented at educating and explaining in a concise way. Just one thing, even on a 4K screen, things look so small, that it would have been nicer to see the config scrolling while you dub over it. Thanks!

[@Jims-Garage]

Thanks for the feedback. Noted, and hopefully more recent videos have addressed this.

[@DoubleHouse]

Thanks for the video! You forgot to mention one important advantage of using redis with Authelia: You can restart the Authelia container (like after changing the configuration or adding a user) without making all users need to re-authenticate.

[@Jims-Garage]

Good to know, thanks. Is that not set by the cookie expiration time?

[@DoubleHouse]

@@Jims-Garage The cookie lifetime only keeps going as long as you don't restart the Authelia container. With redis the tokens are being stored in redis instead of Authelia, so you can restart Authelia without terminating the users tokens.

[@mrd4233]

Pretty powerful tool for SSO and great demo Jim! Quality videos as always!

[@Jims-Garage]

Thanks, Mr. D. I agree, it's a great tool and pretty powerful.

[@chrisumali9841]

Thanks for the demo and info. I've setup Authelia with Duo, so its awesome and great. Have a great day

[@Jims-Garage]

You're ahead of the curve, good job and thanks for the feedback.

[@User-ec2bh]

Did you try out the virtualization feature on TrueNAS? I build a new server a few days ago and still struggling choosing an OS. I used proxmox before but TrueNAS seems to offer about the same features. Besides that not virtualizing TrueNAS gives a few advantages, like no HBA and therefore no struggle with pcie passthrough.

[@Jims-Garage]

I have spun up a few VMs on TrueNAS just to try it out and it worked fine. However, my TrueNAS machine only has a basic dual core CPU as I intentionally bought it to be standalone. TrueNAS should be fine for a homelab, although I prefer Proxmox.

[@User-ec2bh]

@@Jims-Garage thanks for the quick answer! Is there a specific reason for your preference? I've read similar things or "it's just not a full hypervisor" multiple times but nobody pointed out a missing feature or something similar. I'm trying to figure out if Truenas just isn't there yet, or if people prefer Proxmox because it's proven itself. I know it would be best to try it, but my knowledge is limited and I tend to notice problems when it is too late and it would take a lot of work to migrate everything.

[@Jims-Garage]

@@User-ec2bh My reason is purely down to risk. TrueNAS houses all of my important data, it's my backup and active share. I want the lowest chance possible of something going wrong and corrupting my data. Therefore, I just want it to run the SMB shares and look after the ZFS stuff. I'll let Proxmox do all of my virtualisation, safe in the knowledge that my data is safe. It's probably fine to do everything on TrueNAS, it's just not a risk I want to take, and I haven't built it to be able to do much virtualisation.

[@lucianbuzatu4602]

Hi, thanks for your videos, all are very informative! Can you please explain how Redis does the cashing? you installed it but I didn't notice anything using its port. Thanks.

[@Jims-Garage]

Thanks. You need to add the redis config to the Authelia config "redis provider" section. Just specify the IP of the redis container.

[@lucianbuzatu4602]

Thank you. it is possible to use Redis to cash other docker operations? or maybe cash pihole & unbound traffic?

[@Jims-Garage]

@@lucianbuzatu4602 yes, there are many apps that support it (app has to support it to use it).

[@pehucz]

Nice video 👍 But what if I loose my device with Google Authenticator? Does Authelia generate backup codes? I can see "Lost your device?" option during login, what does this option do in this case?

[@mariuszzawierucha1310]

Hi Jim. Could you please make a video / playlist about how to secure our docker containers with ssl certs, please? My case is that I don't have any domain what is crutial here (only at least dynamic ddns like duckdns or no-ip). In such case I just don't know how to get rid of annoying ssl warning while opening web browser. I was tinkiering with Nginx proxy manager, Caddy, Cloudflare etc. But because I don't own any domain (which I don't need at all while I use my containers only locally in Lan) I'm "excluded" from a such sollutions. Even Let's Encrypt require domain... So Certbot here again is useless. Please help with that and prepare tutorial what are options in such case. I'm aware there is possibility to generate self-signed cert (which doesn't solve that nasty warning), but don't undesrtand how to assign it to server/ docker/ container either. Besides that methond might be fine for one or two containers but for dozens of them is not anymore. BTW: my another problem is fact that half of my services are located on one server (so some IP devided on multi ports accesing particular services) and another half on other server (Proxmox VM).

[@Jims-Garage]

I'm afraid you need to buy a domain and then generate a valid certificate with something like letsencrypt. A self-signed certificate will never work as it isn't trusted by a root domain. You can buy a domain for pennies per annum. Check my Traefik video for how to generate a certificate.

[@mhjii]

Awesome Video. Would love to see how to integrate Authelia with SSO for apps that support it.

[@Jims-Garage]

Thanks! I'll probably do a follow up covering that later in the series.

[@Behead974]

@@Jims-Garage with plex please =)

[@Jims-Garage]

@@Behead974 checkout Authentik (I have a video). It's more feature rich.

[@freshnews8538]

Hi Jim Great video and it helped me so much! Can you please make a video about Authentik as well?

[@Jims-Garage]

Yes, someone else mentioned it to me. It looks great, let me investigate.

[@ripaire]

Hey my friend good what you are making but bring something new not just copy paste from technotim channel anyway i love your content and the way how you explain things but i think you're not bringing new things to the community

[@Jims-Garage]

Thanks, appreciate your feedback. I haven't copy pasted anyone's channel, there are quite a few people who have videos deploying Authelia.

[@InsaiyanTech]

He’s bringing what many of us want meaning beginners to the field like my self and is beyond appreciated. If anything Jim your teachings is helped me stride to get my comptia A+ and after to get my network +. Your community is appreciated and I’m sure they’ve let that be known including my self 💯