authelia helm

Authelia is an open-source authentication and authorization server and portal fulfilling the identity and access management (IAM) role of information security in providing multi-factor authentication and single sign-on (SSO) for your applications via a web portal. It acts as a companion for common reverse proxies.

Install

Install with:

helm repo add bjw-s https://bjw-s.github.io/helm-charts/
helm install authelia bjw-s/app-template -f values.yaml

Top Repositories (4 out of 18)

See examples from other people.

NameRepoStarsVersionTimestamp
autheliaKashalls/home-cluster411.5.12 hours ago
autheliaauricom/home-ops1121.5.15 days ago
autheliabrettinternet/homelab1291.5.12 months ago
autheliatoboshii/home-ops2120.2.2a year ago

Values

See the most popular values for this chart:

KeyTypes
image.repository (18)
ghcr.io/authelia/authelia
string
image.tag (18)
4.37.5
string
controller.strategy (17)
RollingUpdate
string
controller.replicas (16)
2
number
controller.annotations."reloader.stakater.com/auto" (13)
true
string
controller.rollingUpdate.surge (2)
number
controller.rollingUpdate.unavailable (1)
number
controller.type (1)
string
enableServiceLinks (17)
false
boolean
envFrom[].secretRef.name (17)
authelia-secret
string
envFrom[].secretRef.namespace (1)
string
ingress.main.enabled (17)
true
boolean
ingress.main.hosts[].host (17)
auth.${SECRET_DOMAIN}
string
ingress.main.hosts[].paths[].path (17)
/
string
ingress.main.hosts[].paths[].pathType (17)
Prefix
string
ingress.main.ingressClassName (17)
nginx
string
ingress.main.tls[].hosts[] (17)
- auth.${SECRET_DOMAIN}
string
ingress.main.tls[].secretName (3)
authelia-tls
string
ingress.main.annotations."nginx.ingress.kubernetes.io/configuration-snippet" (15)
add_header Cache-Control "no-store"; add_header Pragma "no-cache"; add_header X-Frame-Options "SAMEORIGIN"; add_header X-XSS-Protection "1; mode=block";
string
ingress.main.annotations."external-dns.alpha.kubernetes.io/target" (8)
ipv4.${SECRET_DOMAIN}
string
ingress.main.annotations."external-dns.home.arpa/enabled" (6)
true
string
ingress.main.annotations."hajimari.io/icon" (6)
mdi:shield-account
string
ingress.main.annotations."cert-manager.io/cluster-issuer" (3)
letsencrypt-production
string
ingress.main.annotations."hajimari.io/enable" (2)
string
ingress.main.annotations."hajimari.io/group" (2)
string
ingress.main.annotations.external-dns/is-public (1)
string
ingress.main.annotations."hajimari.io/appName" (1)
string
ingress.main.annotations."hajimari.io/name" (1)
string
ingress.main.annotations."ingress.home.arpa/type" (1)
string
ingress.main.annotations."nginx.ingress.kubernetes.io/enable-cors" (1)
string
persistence.config.enabled (17)
true
boolean
persistence.config.mountPath (17)
/config/configuration.yml
string
persistence.config.name (17)
authelia-configmap
string
persistence.config.readOnly (17)
false
boolean
persistence.config.subPath (17)
configuration.yml
string
persistence.config.type (17)
configMap
string
persistence.data.enabled (3)
true
boolean
persistence.data.existingClaim (3)
string
persistence.data.type (2)
string
persistence.data.path (1)
string
persistence.data.subPath (1)
string
resources.limits.memory (17)
100Mi
string
resources.requests.cpu (17)
5m
string
resources.requests.memory (17)
10Mi
string
service.main.ports.http.port (17)
80
number
service.main.ports.http.enabled (1)
boolean
service.main.ports.http.primary (1)
boolean
service.main.ports.metrics.enabled (17)
true
boolean
service.main.ports.metrics.port (17)
8080
number
service.main.ports.redis.enabled (1)
boolean
service.main.ports.redis.port (1)
number
service.main.ports.redis.primary (1)
boolean
service.main.ipFamilyPolicy (1)
string
service.main.monitor.enabled (1)
boolean
service.main.monitor.endpoints[].interval (1)
string
service.main.monitor.endpoints[].path (1)
string
service.main.monitor.endpoints[].port (1)
string
service.main.monitor.endpoints[].scheme (1)
string
service.main.monitor.endpoints[].scrapeTimeout (1)
string
podSecurityContext.fsGroup (16)
568
number
podSecurityContext.fsGroupChangePolicy (16)
OnRootMismatch
string
podSecurityContext.runAsGroup (16)
568
number
podSecurityContext.runAsUser (16)
568
number
topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (16)
authelia
string
topologySpreadConstraints[].maxSkew (16)
1
number
topologySpreadConstraints[].topologyKey (16)
kubernetes.io/hostname
string
topologySpreadConstraints[].whenUnsatisfiable (16)
DoNotSchedule
string
args[] (11)
- --config
- /config/configuration.yaml
- --config.experimental.filters
- expand-env
string
probes.liveness.custom (11)
true
boolean
probes.liveness.enabled (11)
true
boolean
probes.liveness.spec.failureThreshold (11)
3
number
probes.liveness.spec.httpGet.path (11)
/api/health
string
probes.liveness.spec.httpGet.port (11)
80
number
probes.liveness.spec.initialDelaySeconds (11)
0
number
probes.liveness.spec.periodSeconds (11)
10
number
probes.liveness.spec.timeoutSeconds (11)
1
number
probes.readiness.custom (11)
true
boolean
probes.readiness.enabled (11)
true
boolean
probes.readiness.spec.failureThreshold (11)
3
number
probes.readiness.spec.httpGet.path (11)
/api/health
string
probes.readiness.spec.httpGet.port (11)
80
number
probes.readiness.spec.initialDelaySeconds (11)
0
number
probes.readiness.spec.periodSeconds (11)
10
number
probes.readiness.spec.timeoutSeconds (11)
1
number
probes.startup.enabled (11)
false
boolean
probes.startup.custom (2)
boolean
probes.startup.spec.failureThreshold (2)
number
probes.startup.spec.httpGet.path (2)
string
probes.startup.spec.httpGet.port (2)
number
probes.startup.spec.periodSeconds (2)
number
probes.startup.spec.successThreshold (2)
number
probes.startup.spec.timeoutSeconds (2)
number
serviceMonitor.main.enabled (10)
true
boolean
serviceMonitor.main.endpoints[].interval (10)
1m
string
serviceMonitor.main.endpoints[].path (10)
/metrics
string
serviceMonitor.main.endpoints[].port (10)
metrics
string
serviceMonitor.main.endpoints[].scheme (10)
http
string
serviceMonitor.main.endpoints[].scrapeTimeout (10)
10s
string
initContainers.01-init-db.image (8)
ghcr.io/onedr0p/postgres-init:14.9
string
initContainers.01-init-db.envFrom[].secretRef.name (7)
authelia-secret
string
initContainers.01-init-db.imagePullPolicy (7)
IfNotPresent
string
initContainers.01-init-db.env.INIT_POSTGRES_DBNAME (1)
string
initContainers.01-init-db.env.INIT_POSTGRES_HOST (1)
string
initContainers.01-init-db.env.INIT_POSTGRES_PASS (1)
string
initContainers.01-init-db.env.INIT_POSTGRES_SUPER_PASS (1)
string
initContainers.01-init-db.env.INIT_POSTGRES_USER (1)
string
initContainers.init-db.image (2)
string
initContainers.init-db.env[].name (1)
string
initContainers.init-db.env[].value (1)
string
initContainers.init-db.env[].valueFrom.secretKeyRef.key (1)
string
initContainers.init-db.env[].valueFrom.secretKeyRef.name (1)
string
initContainers.init-db.envFrom[].secretRef.name (1)
string
initContainers.init-db.imagePullPolicy (1)
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_USERS_DN (7)
ou=people
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_BASE_DN (7)
dc=home,dc=arpa
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUP_NAME_ATTRIBUTE (7)
cn
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUPS_FILTER (7)
(member={dn})
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_MAIL_ATTRIBUTE (7)
mail
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_URL (7)
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERNAME_ATTRIBUTE (7)
uid
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERS_FILTER (7)
(&({username_attribute}={input})(objectClass=person))
string
env.AUTHELIA_AUTHENTICATION_BACKEND_PASSWORD_RESET_DISABLE (7)
true
string
env.AUTHELIA_DEFAULT_REDIRECTION_URL (7)
https://auth.${SECRET_DOMAIN}
string
env.AUTHELIA_DUO_API_DISABLE (7)
true
string
env.AUTHELIA_LOG_LEVEL (7)
info
string
env.AUTHELIA_NOTIFIER_SMTP_PORT (7)
string, number
env.AUTHELIA_NOTIFIER_SMTP_SENDER (7)
string
env.AUTHELIA_SERVER_DISABLE_HEALTHCHECK (7)
true
string
env.AUTHELIA_SERVER_PORT (7)
80
number
env.AUTHELIA_SESSION_DOMAIN (7)
${SECRET_DOMAIN}
string
env.AUTHELIA_TELEMETRY_METRICS_ADDRESS (7)
tcp://0.0.0.0:8080
string
env.AUTHELIA_TELEMETRY_METRICS_ENABLED (7)
true
string
env.AUTHELIA_THEME (7)
dark
string
env.AUTHELIA_TOTP_ISSUER (7)
authelia.com
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_GROUPS_DN (6)
ou=groups
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_DISPLAY_NAME_ATTRIBUTE (6)
displayName
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_IMPLEMENTATION (6)
custom
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_START_TLS (6)
false
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TIMEOUT (6)
5s
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USER (6)
uid=admin,ou=people,dc=home,dc=arpa
string
env.AUTHELIA_AUTHENTICATION_BACKEND_REFRESH_INTERVAL (6)
1m
string
env.AUTHELIA_NOTIFIER_SMTP_DISABLE_REQUIRE_TLS (6)
true
string
env.AUTHELIA_NOTIFIER_SMTP_HOST (6)
string
env.AUTHELIA_WEBAUTHN_DISABLE (6)
true
string
env.AUTHELIA_NOTIFIER_DISABLE_STARTUP_CHECK (5)
true
string
env.AUTHELIA_SESSION_NAME (5)
authelia-home-ops
string
env.AUTHELIA_SESSION_REDIS_HOST (5)
string
env.AUTHELIA_SESSION_REDIS_DATABASE_INDEX (4)
14
number
env.AUTHELIA_STORAGE_POSTGRES_DATABASE (3)
authelia
string
env.AUTHELIA_STORAGE_POSTGRES_HOST (3)
string
env.AUTHELIA_NOTIFIER_SMTP_USERNAME (2)
string
env.AUTHELIA_SERVER_BUFFERS_READ (2)
string, number
env.AUTHELIA_STORAGE_LOCAL_PATH (2)
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PASSWORD (1)
string
env.AUTHELIA_IDENTITY_PROVIDERS_OIDC_HMAC_SECRET (1)
string
env.AUTHELIA_JWT_SECRET (1)
string
env.AUTHELIA_SERVER_BUFFERS_WRITE (1)
number
env.AUTHELIA_SESSION_REDIS_PORT (1)
number
env.AUTHELIA_SESSION_SECRET (1)
string
env.AUTHELIA_STORAGE_ENCRYPTION_KEY (1)
string
env.AUTHELIA_STORAGE_POSTGRES_PASSWORD (1)
string
env.AUTHELIA_STORAGE_POSTGRES_USERNAME (1)
string
env.GRAFANA_OAUTH_CLIENT_SECRET (1)
string
env.REDIS_REPLICATION_MODE (1)
string
podAnnotations."secret.reloader.stakater.com/reload" (4)
authelia
string
podAnnotations."configmap.reloader.stakater.com/reload" (3)
string
command[] (1)
string
global.nameOverride (1)
string
securityContext.capabilities.add[] (1)
string
securityContext.privileged (1)
boolean
volumeClaimTemplates[].accessMode (1)
string
volumeClaimTemplates[].mountPath (1)
string
volumeClaimTemplates[].name (1)
string
volumeClaimTemplates[].size (1)
string
volumeClaimTemplates[].storageClass (1)
string