authy VS authelia

I don't know why people keep saying this. This app has been around for a while now and works flawlessly, as close to automatic as you can get: https://github.com/alexzorin/authy

Authy totp tokens can be exported from Authy using https://github.com/alexzorin/authy

Just use the totp token as the first entry in the password file, and "pass otp " will generate an otp. Very convenient.

Easy to export

There's project that can export Authy tokens for you to import in Aegis. And every time you add a new token, just scan the QR code with both Authy and Aegis, they are back up for each other (so in case one of them stops working you can use the other one). Authy is also great if you have devices other than Android (Windows, iPhone/iPad, etc.)

Refer: code to extract 2FA seeds from Authy or use this App on github to extract seeds.

It's me and two others though I'm definitely the most active. We put a lot of effort into security best practices and one of my co-developers is currently reviewing the 4.38.0 release. It's a fairly major release with a lot of important code paths that have been improved for the future.

Our official docs can be found at https://www.authelia.com and you can find docs for a particular PR in the relevant PR. We've also linked the pre-release docs in the pre-release discussions which can be found here: https://github.com/authelia/authelia/discussions/categories/...

I use NGINX proxy with Authelia in between. Authelia blocks and blacklists faulty logins.

https://github.com/saltstack/salt https://github.com/chocolatey/choco https://github.com/nextcloud https://github.com/authelia/authelia https://github.com/grafana/grafana

If you are using HAProxy on PfSense/OPNSense, see my issue https://github.com/authelia/authelia/issues/2696

https://github.com/lldap/lldap is a very simple and lightweight LDAP solution. Works flawless with https://www.authelia.com/

Ah yeah, so I guess it's been a while since I tried and I forgot where I got stuck last time. Authelia's config.yml is absolutely massive and I'm not sure which section of their guide I should be following. In The Docker Compose section, there's "Unbundled", "Lite", and "Local". I think I want to be running the "lite" bundle, but their example compose file has a ton of Traefik stuff in it. I know I wouldn't keep the Traefik services, but do I need either secure or public?

Authelia supports SSO. If you are behind a reverse proxy it’s quite straightforward to integrate.

This should probably also be mentioned in the documentation so maybe consider mentioning this on their discussion page.