{"data":{"slug":"authelia","name":"Authelia","tagline":"Apache-2.0 reverse-proxy SSO, not a full IdP like authentik","category":"nextjs","categoryName":"Next.js","url":"https://www.authelia.com","github":"https://github.com/authelia/authelia","pricing":"open-source","hook":"Authelia is the SSO portal you put behind Traefik when authentik is the other mountain.","whatsGood":"Apache-2.0. OSS self-host, no product pricing page. OpenID Connect 1.0 Provider (OpenID Certified). Passkeys, TOTP, WebAuthn, policies. Companion for Traefik, Caddy, nginx. Go + React, tiny container.","theCatch":"You run it behind Traefik/Caddy/nginx. Thin proxy SSO, not a full IdP like authentik (flows, LDAP/RADIUS/SAML, enterprise/). No hosted Authelia Cloud. Ops, the user store, and the proxy stay yours.","verdict":"Apache-2.0 proxy SSO. Free as in you operate the reverse proxy.","addedAt":"2026-09-03","featured":false,"domain":"Auth","subSpecialty":"Auth","capabilities":["auth","sso"],"surfaces":["Self-host"],"ecosystem":["Go"],"licenseModel":"Apache-2.0","githubStars":28786},"related":[{"slug":"vercel","name":"Vercel","tagline":"The platform that made Next.js deployment trivial"},{"slug":"prisma","name":"Prisma","tagline":"Type-safe database access with killer DX"},{"slug":"drizzle","name":"Drizzle ORM","tagline":"TypeScript ORM that feels like SQL"},{"slug":"trpc","name":"tRPC","tagline":"End-to-end typesafe APIs without codegen"},{"slug":"clerk","name":"Clerk","tagline":"Auth that actually ships with your UI"}],"links":{"self":"/api/gems/authelia","html":"/gems/authelia","markdown":"/gems/authelia.md","category":"/api/gems?category=nextjs","categoryPage":"/stacks/nextjs"}}