totp-generator VS authelia

Someday this will come back to bite you, but you can store the secret key in your CRM, then use something like https://github.com/jaden/totp-generator to generate OTP codes.

I'm even one degree more extreme with my email 2FA though. I memorized the 2FA secret and put a TOTP generator project from github on a public subdomain on my web server. Together with the username and the password, which I also memorized, I am able to use any two devices (or any single device if I trust that it is not compromised) to gain access to my 2FA-protected email account.

I think the https://github.com/jaden/totp-generator you posted may be the better choice, it is far more self contained.

Hello, if I self-host Bitwarden's server, Can I user TOTP, because in the mean time, I can only enter TOTP code through web extension but can't use it ! Although it is easy to implement a free TOTP generator ! If self-hosting bitwarden is not enough to unlock this functionality, is there another way to do this like adding my own totp generator or by linking vault with passman ?

It's me and two others though I'm definitely the most active. We put a lot of effort into security best practices and one of my co-developers is currently reviewing the 4.38.0 release. It's a fairly major release with a lot of important code paths that have been improved for the future.

Our official docs can be found at https://www.authelia.com and you can find docs for a particular PR in the relevant PR. We've also linked the pre-release docs in the pre-release discussions which can be found here: https://github.com/authelia/authelia/discussions/categories/...

I use NGINX proxy with Authelia in between. Authelia blocks and blacklists faulty logins.

https://github.com/saltstack/salt https://github.com/chocolatey/choco https://github.com/nextcloud https://github.com/authelia/authelia https://github.com/grafana/grafana

If you are using HAProxy on PfSense/OPNSense, see my issue https://github.com/authelia/authelia/issues/2696

https://github.com/lldap/lldap is a very simple and lightweight LDAP solution. Works flawless with https://www.authelia.com/

Ah yeah, so I guess it's been a while since I tried and I forgot where I got stuck last time. Authelia's config.yml is absolutely massive and I'm not sure which section of their guide I should be following. In The Docker Compose section, there's "Unbundled", "Lite", and "Local". I think I want to be running the "lite" bundle, but their example compose file has a ton of Traefik stuff in it. I know I wouldn't keep the Traefik services, but do I need either secure or public?

Authelia supports SSO. If you are behind a reverse proxy it’s quite straightforward to integrate.

This should probably also be mentioned in the documentation so maybe consider mentioning this on their discussion page.