Home / Marketplace / Authelia on Ubuntu 24.04 LTS

Authelia on Ubuntu 24.04 LTS

Authelia is a single sign-on and two-factor authentication portal that sits in front of your reverse proxy (nginx, Traefik, Caddy) to protect web applications. This image gives you a production-ready deployment within minutes of first boot — no dependency wrangling, no manual hardening checklist. Published and maintained by Derek Coleman & Associates Inc: freshly rebuilt against current security advisories and deployable straight from the Azure Marketplace into your own subscription.

Get it on Azure Marketplace Deploy on Azure Support & quick start

Version: Authelia 4.39.20Platform: Ubuntu 24.04 LTSPorts: 9091 (portal / API)Category: Security & Identity

What's included

Authelia installed from the official upstream source
Ubuntu 24.04 LTS base with automatic security updates enabled
No shared or default passwords — a unique admin credential is generated on your VM at first boot
Trusted Launch support: Secure Boot + vTPM
Azure Monitor Agent, Defender for Cloud, and Update Manager install cleanly

Quick start

Deploy from the Azure Marketplace (Get It Now → Create), choosing your SSH key at the Administration step.
Allow inbound SSH (22) for yourself plus the application port(s): 9091 (portal) — normally only from your reverse proxy — restrict to your own IP where possible. The in-image firewall already allows them; only the Network Security Group (NSG) keeps them closed.
Set your domain in /etc/authelia/configuration.yml and put the portal behind your reverse proxy over HTTPS (see First login below).
Add forward-auth rules to your proxy and access_control policies in configuration.yml for each protected application.

Get your admin password (one time)

ssh <your-username>@<VM-IP>
sudo cat /root/authelia-admin-credentials.txt

Sign in as admin with the generated password — but only through your own domain: Authelia validates the request Host against session.cookies, which ships as a placeholder until you set it.

Common use cases

SSO + 2FA in front of internal web apps
Forward-auth for Traefik/nginx/Caddy
Access policies per domain and group
Replacing basic-auth on admin dashboards

Why our images

Freshly rebuilt against the latest security advisories, no shared default credentials, Trusted Launch support, and automatic OS security updates — everything runs in your own Azure subscription under your governance.

Need help?

Product support page
support@dcassociatesgroup.com
Contact form