Additional Self-Hosted Security with Authelia on NGINX Proxy Manager

In this video we're going to take a look at installing Authelia via Docker and Portainer so that we can add another level of authentication security to other subdomains on our self-hosted server(s).

REFERENCE MATERIAL:

Authelia Configs:

NGINX Proxy Manager

Install CloudFlare SSLs in NGINX Proxy Manager

/=========================================/

✨Find all my social accounts here:

✨Join this channel to get access to perks:

✨Come chat in Discord:

✨Services (Affiliate Links):

✨Hardware (Affiliate Links):

The hardware in my current home server is:

/=========================================/

Remember to leave a like on this video and subscribe if you want to see more!

/=========================================/

Like what I do? Want to be generous and help support my channel? Here are some ways to support:

/=========================================/

Here's my Amazon Influencer Shop Link:

[afrosheenix]

PRO TIP ---- If you're using a Gmail account, before you enter your configuration details at 18:00 go into your Google account settings, then security, then generate an App Password. This ensures that you have a single-use password for this program with it's own unique identifier, and it is not the same as your "normal" email password, and it also won't be challenged the same. It'll break if you don't do it this way with many old fashioned authentication schemes.

[philwalker]

I'm very late to this tutorial, as it's only something I've felt the need for recently.
That said, thanks for another great tutorial (I know I've used at least one of your's before for something else, but I forget which one).
I could trawl through all of the documentation for Authelia, and figure it out myself *eventually*, but it's always really time consuming.
Your vids are a huge timesaver, as you condense things down to what we need to know, and you explain it really well; pretty quickly, but step by step and comprehensively.
Easy to follow, even for beginners in the home server space.
Bookmarked, and I'll go through this tomorrow (although it'll take some time to get through my 23 container setup).
Thank you.

[florent]

There is a tabulation before the comment line in "users_database.yml". My authelia container wouldn't start at all, removed the tab that's did the trick. Thank you very nice vid and well explained !

[DipanGhosh]

This worked like a charm. Thank you SO MUCH for putting this together. There is very little info on how to set this combo up, but your documentation has proved invaluable.

[JUAN]

Very helpful. Got me throught and was able to get Authelia up and running on my end. Tutorial still relevant as of July 2023

[johnpetro]

This is gonna be REALLY helpful. Lots of great info here. Thank you so much for putting this together. As always, it was well explained. I definitely feel like I have a somewhat better understanding of what's going on here.

[jasonmeehan]

superb video, I thought setting this up was going to be a nightmare, but you've made it very manageable

[Jeroenus]

This is a great tutorial!! Was looking to set up Authelia with Nginx Proxy Manager for a while but didn't find anything useful until I checked your channel. Great video as always ❤

[Pickledeggs]

Fantastic guide! Thank you so much, helped me get this all running in no time after struggling with other options :)

[Glatze]

Thanks for this video about this awesome open source tool. I installiert it a few weeks ago and I love it! Now I have 2fa for every software that I would like to reach from outside my homelab! It‘s really great!

[tiagoriserio]

Thank you very much!! Absloutelly incredible job. I've seen the video twice: once for preparing, the second time for action and it worked flawless!!!

[BobbieERay]

This was very helpful thank you. In regards to the "sessions:" variables @ 00:16:02. You can actually fill in minutes, or hours. You just have to denominate them differently, e.g. "expiration: 5m", or "expiration: 1h", instead of "expiration: 3600"

And as @glassman3333 has pointed already, changing the name, as shown @ 00:29:43, is obsolete. You're just a changing a variable name that is being referenced in the next line. So all you have to do, is to make sure that it is consistent between the two, but you don't have to adjust it.

[egorzakharov]

Thank you! Very inspiring video! I'll use this auth in my serup. Love your content bro, you are laways amazing. You save me so much time researching

[sajeeshnair]

This is the best Authelia tutorial have come across. All my doubts are absolutely clear. Cheers!

[omgMBP]

Fantastic walkthrough. I had commented on this topic on another authelia video of yours, promising I'd come back and review this video on nginx proxy and authelia working together.

I've had this working on my personal stuff for about 6 months now without issue... but I went through absolute hell getting it going at first because of the limited and/or poor documentation on the topic.

I'm rather proud to say that my solution was effectively the same as yours - but I could have saved about three days of slamming my head against nginx proxy manager to get it going if I had your video and templates to get me going. Your formatting is better than mine on your templates, so Im going to be going through all subdomains and just use yours.

This was an excellent video making a fairly advanced topic manageable for a newer power user. Thanks for the great solution and the templates!

[Galakyllz]

This video was super helpful! Thank you for putting all of this together. I really appreciate it.

[TerenceKearns]

Well done. Thanks for all your hard work. I won't be implementing this right away but I watched it through just to get an idea of what's involved.

[glassman]

Thank you so much for all your work on this. It was a great video. The one part I was a little confused about was in the section where you made the protected domain conf. After looking at it for quite a while, I believe you can set your "set $upstream_<name>" to whatever name you want, as long as the line below it matches, because we're setting a variable, correct? Also, I found that if you then simply define that variable name to to finish out the line (like you had it initially), it will always work (instead of putting in the actual server name and port). This is because $server and $port are already defined as the "Forward Hostname / IP*" and "Forward Port" values that we setup in the initial Proxy Host entry.

I'm really just looking for some clarification, because I set it up this way, and it seems to be working. This is probably what you meant, and I just misunderstood along the way. Again, thank you for all your really hard work. I don't think there's any way I could've set this up successfully without your video.

[Rakiga]

Easily one of the best videos for setting this up. Even using a different OS (TrueNAS), I was able to set it up without issue. Thanks!

[MyAeia]

Thank you very much.
Thanks to your tutorial I finally got Authelia up and running. Very good explanation that could be taken over 1 to 1 so with me without problems