authelia

Sun, 14 Dec 2025 00:00:00 +0000

 graph LR
 subgraph gvp6nx1a
 B1[apps] <-- proxy --> B
 C[nginx] -- login --> B[authelia]
 C -- login --> D1[apps]
 end
 F[client] -- https --> C

container 구성

docker-compose.yml

vi /opt/authelia/docker-compose.yml

services:
 authelia:
 image: authelia/authelia:latest
 container_name: authelia
 networks:
 - dev
 ports:
 - 9091/tcp
 user: 0:0
 environment:
 - TZ=Asia/Seoul
 volumes:
 - /opt/authelia/config:/config:rw
 restart: unless-stopped
networks:
 dev:
 external: true

configuration.yml

app	url	admiin 접근	guest 접근	login 페이지
privatebin	pb.gvp6nx1a.duckdns.org	O	X	X
webtop	wb.gvp6nx1a.duckdns.org	O	O	X
esportshlper	es.gvp6nx1a.duckdns.org	O	O	X
g4f	g4.gvp6nx1a.duckdns.org	O	O	X
authelia	au.gvp6nx1a.duckdns.org	O	O	O

vi /opt/authelia/config/configuration.yml

server:
 address: 'tcp://:9091/authelia'
log:
 level: 'info'
identity_validation:
 reset_password:
 jwt_secret: 'p***************************************************************'
default_redirection_url: 'https://au.gvp6nx1a.duckdns.org/'
duo_api:
 hostname: 'gvp6nx1a.duckdns.org'
 integration_key: 'c***************************************************************'
 secret_key: 'b***************************************************************'
authentication_backend:
 password_reset:
 disable: false
 file:
 path: '/config/users_database.yml'
 password:
 algorithm: 'argon2id'
 iterations: 3
 memory: 65536
 parallelism: 4
 key_length: 32
 salt_length: 16
access_control:
 default_policy: 'deny'
 rules:
 - domain_regex: '^(pb).gvp6nx1a.duckdns.org'
 subject: 'group:guests'
 policy: 'one_factor'
 - domain_regex: '^(wb|es|g4).gvp6nx1a.duckdns.org'
 subject: 'group:admins'
 policy: 'one_factor'
 - domain: 'au.gvp6nx1a.duckdns.org'
 policy: 'bypass'
session:
 name: 'authelia_session'
 secret: 'K***************************************************************'
 expiration: '1h'
 inactivity: '5m'
 remember_me: '1M'
 domain: 'gvp6nx1a.duckdns.org'
regulation:
 max_retries: 3
 find_time: '2m'
 ban_time: '5m'
storage:
 encryption_key: 'E***************************************************************'
 local:
 path: '/config/db.sqlite3'
notifier:
 disable_startup_check: false
 smtp:
 host: 'smtp.mail.yahoo.com'
 port: 465
 timeout: '5 seconds'
 username: 'x*******@yahoo.com'
 password: '****************'
 sender: 'Authelia <x*******-********@yahoo.com>'
 identifier: 'localhost'
 subject: '[Authelia] {title}'
 startup_check_address: 'x*******-********@yahoo.com'
 disable_require_tls: false
 disable_html_emails: false
 tls:
 skip_verify: false
 minimum_version: 'TLS1.2'

users_database.yml

암호 hash 생성

authelia on 대충어쩌고저쩌고샬라샬라

authelia

container 구성

docker-compose.yml

configuration.yml

users_database.yml