https://wiki.nixos.org/w/index.php?action=history&feed=atom&title=Authelia 2026-05-17T05:45:29Z Revision history for this page on the wiki MediaWiki 1.45.0 https://wiki.nixos.org/w/index.php?title=Authelia&diff=31896&oldid=prev 2026-05-16T23:12:09Z

<p>Added example Authelia module</p> <p><b>New page</b></p><div>== Minimal Configuration Example ==<br /> &lt;syntaxhighlight lang=&quot;nix&quot;&gt;<br /> { config, pkgs, ... }:<br /> {<br /> age.secrets.&quot;authelia_jwt-secret-file&quot; = {<br /> file = ../../secrets/authelia_jwt-secret-file.age;<br /> owner = &quot;authelia-main&quot;;<br /> };<br /> age.secrets.&quot;authelia_storage-encryption-key-file&quot; = {<br /> file = ../../secrets/authelia_storage-encryption-key-file.age;<br /> owner = &quot;authelia-main&quot;;<br /> };<br /> <br /> services.authelia.instances.main = {<br /> enable = true;<br /> package = pkgs.authelia;<br /> secrets = {<br /> jwtSecretFile = config.age.secrets.&quot;authelia_jwt-secret-file&quot;.path;<br /> storageEncryptionKeyFile = config.age.secrets.&quot;authelia_storage-encryption-key-file&quot;.path;<br /> };<br /> settings = {<br /> theme = &quot;auto&quot;;<br /> default_2fa_method = &quot;totp&quot;;<br /> log.level = &quot;info&quot;;<br /> server.address = &quot;tcp://:9091/&quot;;<br /> session = {<br /> cookies = [<br /> {<br /> domain = &quot;domain.tld&quot;;<br /> authelia_url = &quot;https://auth.domain.tld&quot;;<br /> }<br /> ];<br /> };<br /> access_control = {<br /> default_policy = &quot;deny&quot;;<br /> rules = [ <br /> {<br /> domain = &quot;auth.domain.tld&quot;;<br /> policy = &quot;bypass&quot;;<br /> }<br /> {<br /> domain = &quot;*.domain.tld&quot;;<br /> policy = &quot;one_factor&quot;;<br /> }<br /> ];<br /> };<br /> storage.local.path = &quot;/var/lib/authelia-main/db.sqlite&quot;;<br /> notifier.filesystem.filename = &quot;/var/lib/authelia-main/notifications.yml&quot;;<br /> authentication_backend.file.path = &quot;/etc/authelia/users.yml&quot;;<br /> };<br /> };<br /> environment.etc.&quot;authelia/users.yml&quot; = {<br /> mode = &quot;0400&quot;;<br /> user = &quot;authelia-main&quot;;<br /> text = &#039;&#039;<br /> users:<br /> john:<br /> password: &quot;$argon...&quot; # generate with `authelia -c authelia crypto hash generate`<br /> displayname: &quot;John&quot;<br /> email: &quot;&lt;your_email&gt;&quot;<br /> groups: [&quot;admins&quot;]<br /> &#039;&#039;;<br /> };<br /> services.nginx.virtualHosts.&quot;auth.domain.tld&quot; = {<br /> forceSSL = true;<br /> locations.&quot;/&quot;.proxyPass = &quot;http://127.0.0.1:9091&quot;;<br /> };<br /> }<br /> &lt;/syntaxhighlight&gt;</div>

Zeal