Authelia
Apache-2.0 reverse-proxy SSO, not a full IdP like authentik
Auth / Auth · Apache-2.0 · 28.8k
What's Good
Apache-2.0. OSS self-host, no product pricing page. OpenID Connect 1.0 Provider (OpenID Certified). Passkeys, TOTP, WebAuthn, policies. Companion for Traefik, Caddy, nginx. Go + React, tiny container.
The Catch
You run it behind Traefik/Caddy/nginx. Thin proxy SSO, not a full IdP like authentik (flows, LDAP/RADIUS/SAML, enterprise/). No hosted Authelia Cloud. Ops, the user store, and the proxy stay yours.
Verdict
Apache-2.0 proxy SSO. Free as in you operate the reverse proxy.
Embed
[](https://stackgems.com/gems/authelia)