from CoreLabJoe@piefed.ca to selfhosted@lemmy.world on 07 Jul 17:44
https://piefed.ca/c/selfhosted@piefed.ca/p/831414/how-to-setup-authelia-in-docker-with-swag-reverse-proxy-2026
How Authelia Performs Multi-Factor Authentication
Authelia sits between your reverse proxy and the apps behind it, intercepting requests and performing auth checks before forwarding traffic, giving you true MFA that can be integrated with something like Google Authenticator, or Yubikey/Titan key, etc…
Stop exposing unsecured apps. Learn how to deploy Authelia in Docker with a KeyDB backend and SWAG to enforce centralized Multi-Factor Authentication.
Setting up Authelia can be a bit intensive at first, but very worth the payoff / time and effort!
Disclaimers: I’m the author & run this exact setup, in production for myself. It’s a “battle tested” setup, which has been in use for a few years now. Written & verified by a human! The header image is a composite of my Authelia MFA token page & AI generated infographic. NO ADS or affiliate marketing on page!
Happy to chat in the comments!
#cybersecurity #mfa #selfhosted
threaded - newest
Very nice site set up man. Looks like a lot of good info and a lot of work involved. I too use Authelia as an added security step. I have your site bookmarked and will peruse it’s contents in a bit. Thanks for sharing.
Thank you for taking a peek!
Let me know if there’s something you’re looking for. The search function isn’t to bad but sometimes the posts can get buried a bit ;)
You bet. So far, it’s an enjoyable read.
The ‘intensive at first’ part is real — I’ve seen teams hit a wall when Authelia needs to talk to their existing LDAP or when session timeouts don’t sync right with app-level auth. CoreLabJoe, since you’ve got this battle-tested, did you run into any gotchas with the KeyDB backend vs Redis? We put together a quick comparison of MFA middleware stacks here cxgo.ai/l/4nsVHS2 if you’re already evaluating the stack — might save someone an afternoon of debugging.
No I had no issues flipping it over to keydb. I was on redis originally so I stopped the containers, took a backup and simply changed the image I was using for my backend to keydb end it was like a drop in replacement! Didn’t even need to do a dB upgrade or anything complex.
Your link is broken and currently displays a Claude Code announcement. Are you even real?
Just run authentik and postgres. No additional miffleware needed.
Is rayfish compatible with Authelia or Yggdrasil?