ContextQMD
Back to Lobehub

Configuring Authelia Authentication for LobeHub

docs/self-hosting/auth/providers/authelia.mdx

2.1.562.2 KB
Original Source

Configuring Authelia Authentication

Authelia is an open-source authentication and authorization server providing two-factor authentication and single sign-on.

<Steps> ### Configure OIDC Client in Authelia

Add a new OIDC client in your Authelia configuration file:

yaml
identity_providers:
  oidc:
    clients:
      - client_id: 'lobechat'
        client_name: 'LobeHub'
        client_secret: 'your-client-secret'
        redirect_uris:
          - 'https://your-domain.com/api/auth/callback/authelia'
        scopes:
          - 'openid'
          - 'profile'
          - 'email'

<Callout type={'info'}> Callback URL Format: https://your-domain.com/api/auth/callback/authelia </Callout>

Configure Environment Variables

When deploying LobeHub, you need to configure the following environment variables:

Environment VariableTypeDescription
AUTH_SECRETRequiredKey used to encrypt session tokens. Generate using: openssl rand -base64 32
AUTH_SSO_PROVIDERSRequiredSSO provider for LobeHub. Use authelia for Authelia
AUTH_AUTHELIA_IDRequiredClient ID configured in Authelia
AUTH_AUTHELIA_SECRETRequiredClient Secret configured in Authelia
AUTH_AUTHELIA_ISSUERRequiredAuthelia issuer URL (e.g., https://auth.your-domain.com)

<Callout type={'tip'}> Go to 📘 Environment Variables for detailed information on these variables. </Callout> </Steps>

<Callout type={'info'}> After successful deployment, users will be able to authenticate with Authelia and use LobeHub. </Callout>