Deploy Authelia on your own server.
Authelia is an open-source authentication and authorization server providing two-factor authentication and single sign-on (SSO) for your applications via a web portal. It acts as a companion to reverse proxies such as Traefik, Nginx, or Caddy to control whether requests should pass through. Authelia is also an OpenID Connect 1.0…
Your infrastructureAutomatic HTTPSNo lock-in
Screenshots
A closer look at Authelia.
Setup time
A few minutes
Deployment
Your own server
Services
1 connected service
Why Authelia
Everything you need, running where you choose.
Get the full Authelia experience with Easypanel handling the repetitive infrastructure work around it.
Reverse Proxy Integration
Works natively with Traefik, Nginx, Caddy, HAProxy, and more via forward authentication headers — no agents or sidecar containers required.
Fine-Grained Access Control
Define rules by domain, path, method, user, group, and network to allow, bypass, or require one- or two-factor authentication per resource.
File and LDAP User Backends
Manage users with a simple YAML file for small deployments or connect to an LDAP or Active Directory server for enterprise-scale user management.
SQLite Storage
Stores all persistent state — TOTP secrets, WebAuthn credentials, session records — in a local SQLite database with no external DB required.
Regulation and Brute-Force Protection
Automatically bans accounts and IPs after configurable failed-attempt thresholds, protecting against credential-stuffing and brute-force attacks.
Multi-Factor Authentication
Add TOTP, WebAuthn (passkeys and hardware keys), and Duo push notifications on top of any password-based login, without modifying the protected application.
How it works
From template to live app in three steps.
Easypanel turns the template into real services, storage, and domains on the server you already control.
Already have Easypanel? Open your dashboard at the URL or IP of your own installation.
Installation guide1
Open your dashboard
Visit the URL or IP of your Easypanel installation and choose the target project.
2
Choose Authelia
Open Templates, select Authelia, then review its service names and configuration.
3
Deploy and open your app
Easypanel starts every service and provisions an HTTPS domain for you.
Installation options
The template asks for these values before creating your services.
| Option | Default | Required |
|---|---|---|
App Service Name | authelia | Required |
App Service Image | authelia/authelia:4.39.20 | Required |
Admin Password Password for the initial "admin" user account. | Set during install | Required |
Before you deploy
After deployment, open the Authelia URL you configured. Log in with username "admin" and the password you set during setup. On first login you will be prompted to register a TOTP authenticator app. The "Authelia URL" field must exactly match the full HTTPS URL you use to reach Authelia (e.g. https://auth.yourdomain.com) — a mismatch causes the "issue retrieving user state" error. Password reset notifications are written to /data/notification.txt inside the container; view them via the Easypanel console if no SMTP is configured.
Resources
Project documentation and source code.
Latest template update
Jul 7, 2026
First Release
Questions
Deploy with confidence.
The template handles the application setup while Easypanel keeps the infrastructure understandable and under your control.
Keep exploring
Browse allRelated templates
Keycloak
Keycloak is an open-source Identity and Access Management tool that adds authentication to applications and secures services with minimal effort. It eliminates the need for storing or authenticating users, providing user federation, robust authentication, user management, and fine-grained authorization. Keycloak offers a Single-Sign On feature, allowing users to authenticate with Keycloak rather than individual applications, ensuring a seamless login experience across multiple applications. It also supports social login and can authenticate users with existing OpenID Connect or SAML 2.0 Identity Providers. Keycloak has built-in support to connect to existing LDAP or Active Directory servers and provides a centralized admin console for managing all aspects of the server. It also offers an account management console for users to manage their own accounts. Based on standard protocols, Keycloak supports OpenID Connect, OAuth 2.0, and SAML, and provides fine-grained authorization services for advanced permission management.
View template
Authentik
Authentik is an open-source Identity Provider focused on flexibility and versatility. It provides secure authentication, authorization, and user management with support for single sign-on (SSO), multi-factor authentication (MFA), and a modern user interface.
View template
Authorizer
Authorizer is a powerful tool designed to simplify the process of user authentication and authorization in your applications. It allows you to build secure apps 10x faster with its low code tool and low-cost deployment. With Authorizer, you have full control over your user data, which can be stored in your preferred database. The app supports multiple authentication recipes and allows you to authorize users based on your business roles. It is compatible with OAuth2 and OpenID APIs. Authorizer also offers secure session management with the best services baked in, including HTTP only cookies and Authorization Code flow for mobile-based authentication. It supports a wide range of databases, including major SQL, NoSQL, and GraphDBs. You can customize emails, configure webhooks for various events, and add an extra layer of security with email-based OTP for basic authentication. With Authorizer, you can deploy your authentication and authorization service anywhere with multiple deployment options. It is a comprehensive solution for all your authentication and authorization needs.
View template
Ready to deploy Authelia?
Open your own Easypanel dashboard, choose Authelia from Templates, and review the deployment options.