Authelia on Ubuntu 24.04 LTS — Support & Quick Start

At a glance

Application ports	9091 (portal / API)
Open in browser	http://<VM-IP>:9091/
Admin credential file	sudo cat /root/authelia-admin-credentials.txt
Sign in as	admin
Service(s)	authelia
Configuration	/etc/authelia/configuration.yml (session.cookies domain + authelia_url MUST be set to your domain); users in /etc/authelia/users_database.yml
Logs	journalctl -u authelia -f
Version	Authelia 4.39.20
Platform	Ubuntu 24.04 LTS

Quick start

1. Deploy from the Azure Marketplace (Get It Now → Create), choosing your SSH key at the Administration step.
2. Allow inbound SSH (22) for yourself plus the application port(s): 9091 (portal) — normally only from your reverse proxy — restrict to your own IP where possible. The in-image firewall already allows them; only the Network Security Group (NSG) keeps them closed.
3. Set your domain in /etc/authelia/configuration.yml and put the portal behind your reverse proxy over HTTPS (see First login below).
4. Add forward-auth rules to your proxy and access_control policies in configuration.yml for each protected application.

First login / credentials

This image generates its admin credential on the VM at first boot — nothing is pre-set. SSH into the VM with the username + key you chose at deploy, then print the generated credential:

ssh <your-username>@<VM-IP>
sudo cat /root/authelia-admin-credentials.txt

Sign in as admin.

1. Print the credential file: username admin and the generated password.
2. The image ships the placeholder cookie domain example.com, so the portal rejects logins on a bare IP: edit /etc/authelia/configuration.yml → session.cookies (domain + authelia_url) to YOUR domain, front the portal with your reverse proxy over HTTPS pointing at http://127.0.0.1:9091, then `sudo systemctl restart authelia`.
3. Rotate the password: `authelia crypto hash generate argon2 --password '<new>'` and replace the hash in /etc/authelia/users_database.yml; configure the smtp notifier for password resets.

Sign in as admin with the generated password — but only through your own domain: Authelia validates the request Host against session.cookies, which ships as a placeholder until you set it.

Still stuck?

Email support@dcassociatesgroup.com (response within 1 business day) or send a message via the contact form. Include the offer name, VM size, region, and any log output — sudo journalctl -u <service> -n 100 usually tells the story.