heyer.systems

Authelia

Single sign-on and two-factor portal for the apps behind your reverse proxy (forward auth, OpenID Connect).

Install

On the Proxmox node as root:

bash -c "$(curl -fsSL https://iac.heyer.systems/authelia/ct.sh)"

Container from the Debian 13 template · default: 1 CPU, 512 MiB RAM, 4 GiB disk

Customise the commandYour own values for CPU, RAM, network and modules – no dialog

Then: Portal: the authelia_url behind your HTTPS reverse proxy (upstream http://<IP>:9091) – login: admin, password in the guest: grep authelia_admin_password /etc/iac/settings.env

Update

In the guest:

update

Debian packages, Authelia, modules and the iac configuration. Major versions never change automatically.

Add modules – any time, in containers and VMs alike:

update --list-modules
update --add-modules node-exporter

All modules · More about update

Adopt an existing installation in the guest as root

bash -c "$(curl -fsSL https://iac.heyer.systems/authelia/adopt.sh)"

Checks first and stops before any change if an automatic adoption is not possible – then follow the migration guide.