How to Self-Host Authelia on a VPS (Complete Guide)

Authelia is an open-source authentication and authorization server, ideal for developers looking to secure their web applications. This guide will walk you through the process of self-hosting Authelia on a VPS using Docker, ensuring your apps have secure access control.

Prerequisites

1. VPS Selection - Choose a reliable VPS provider. Here’s a comparison of some top options:

For more options, check out our full VPS comparison.

2. Basic knowledge of Docker and terminal commands.
3. A domain name for setting up Authelia (optional but recommended).

Step 1: Set Up Your VPS

1. Create a VPS Instance: Choose your preferred provider and configure your instance. For example, with Hetzner, you can get started for as low as 4.15 EUR/mo.

2. Access Your VPS: Connect via SSH:

   ssh root@your_vps_ip

3. Update Your System: Ensure your system packages are up to date.

   apt update && apt upgrade -y

Step 2: Install Docker

1. Install Required Packages:

   apt install apt-transport-https ca-certificates curl software-properties-common -y

2. Add Docker’s Official GPG Key:

   curl -fsSL https://download.docker.com/linux/debian/gpg | apt-key add -

3. Set up the Stable Repository:

   add-apt-repository "deb [arch=amd64] https://download.docker.com/linux/debian $(lsb_release -cs) stable"

4. Install Docker:

   apt update && apt install docker-ce docker-ce-cli containerd.io -y

5. Verify Installation:

   docker --version

Step 3: Install Authelia

1. Create a Docker Network:

   docker network create authelia_network

2. Create Configuration Files: Prepare your configuration files by creating a folder.

   mkdir -p ~/authelia/config

3. Sample Configuration (configuration.yml): Create and edit configuration.yml in the config folder.

   host: "0.0.0.0"
   port: 9091
   ...

   Note: Replace ... with other required configurations. Refer to Authelia documentation for detailed setup.

4. Create Docker Compose File: In the same directory, create a docker-compose.yml file.

   version: '3.8'
   services:
     authelia:
       image: authelia/authelia:latest
       restart: always
       networks:
         - authelia_network
       volumes:
         - ./config:/config
       ports:
         - "9091:9091"

5. Start Authelia:

   docker-compose up -d

6. Check Status:

   docker ps

Step 4: Configure a Reverse Proxy

Use a reverse proxy such as Nginx to handle ACME challenges for SSL certificates and direct traffic to your Authelia instance.

1. Install Nginx:

   apt install nginx -y

2. Nginx Configuration Example: Edit /etc/nginx/sites-available/authelia:

   server {
       listen 80;
       server_name your_domain.com;
   
       location / {
           proxy_pass http://localhost:9091;
           ...
       }
   }

3. Enable Configuration:

   ln -s /etc/nginx/sites-available/authelia /etc/nginx/sites-enabled/
   systemctl restart nginx

Step 5: Finalizing Setup

1. Secure Authelia with HTTPS: Use Let’s Encrypt for SSL certificates.
2. Test Authelia: Navigate to your domain in a web browser. You should see the Authelia login page.
3. Configure Authelia with Your Applications: Integrate and configure Authelia with the services you wish to protect.

FAQs

What is Authelia and why should I use it?

Authelia is an open-source authentication and authorization server designed for developers. It provides secure access control for your applications without needing to generate individual user management systems. This is particularly valuable for developers who self-host multiple services in a homelab or VPS environment.

Can I install Authelia without Docker?

Yes, Authelia can be installed without Docker, but using Docker simplifies the process. Docker provides isolated environments, ensuring that your application dependencies do not interfere with your system or other applications. If you prefer a manual installation, follow the official Authelia documentation for guidance.

How do I troubleshoot common issues with Authelia?

Common issues often revolve around misconfigurations, especially in the configuration.yml or .env files. Ensure all required fields are present and correctly formatted. Check Docker logs for your Authelia container using:

docker logs authelia

Also, ensure that the network configuration is correct and that the reverse proxy is routing traffic correctly.

By following the steps outlined above, you can successfully self-host Authelia on your VPS, enhancing the security of your applications. Make sure to regularly update your configurations and Docker images for optimal security and performance.