|
| 1 | +# TLDR |
| 2 | + |
| 3 | +**Validate configuration file** |
| 4 | + |
| 5 | +```authelia validate-config --config [config.yml]``` |
| 6 | + |
| 7 | +**Generate password hash** |
| 8 | + |
| 9 | +```authelia crypto hash generate argon2``` |
| 10 | + |
| 11 | +**Generate random secret** |
| 12 | + |
| 13 | +```authelia crypto rand --length [64]``` |
| 14 | + |
| 15 | +**Generate RSA keypair** |
| 16 | + |
| 17 | +```authelia crypto pair rsa generate``` |
| 18 | + |
| 19 | +**Generate TOTP secret** |
| 20 | + |
| 21 | +```authelia crypto totp generate --issuer [MyApp]``` |
| 22 | + |
| 23 | +**Hash a password interactively** |
| 24 | + |
| 25 | +```authelia crypto hash generate argon2 --password``` |
| 26 | + |
| 27 | +**Show version** |
| 28 | + |
| 29 | +```authelia --version``` |
| 30 | + |
| 31 | +**Run the server** |
| 32 | + |
| 33 | +```authelia --config [/etc/authelia/config.yml]``` |
| 34 | + |
| 35 | +# SYNOPSIS |
| 36 | + |
| 37 | +**authelia** [_global-options_] _command_ [_options_] |
| 38 | + |
| 39 | +# COMMANDS |
| 40 | + |
| 41 | +**crypto** hash|pair|rand|certificate|totp |
| 42 | +> Cryptographic utilities for generating secrets and hashes. |
| 43 | +
|
| 44 | +**validate-config** |
| 45 | +> Validate configuration file syntax and values. |
| 46 | +
|
| 47 | +**storage** migrate|schema-info|user|encryption |
| 48 | +> Database storage management and migrations. |
| 49 | +
|
| 50 | +**access-control** check-policy |
| 51 | +> Test access control rules against requests. |
| 52 | +
|
| 53 | +**build-info** |
| 54 | +> Display build information. |
| 55 | +
|
| 56 | +# CRYPTO SUBCOMMANDS |
| 57 | + |
| 58 | +**crypto hash generate** argon2|pbkdf2|sha2crypt|bcrypt |
| 59 | +> Generate password hash using specified algorithm. |
| 60 | +
|
| 61 | +**crypto pair** rsa|ecdsa|ed25519 |
| 62 | +> Generate cryptographic key pairs. |
| 63 | +
|
| 64 | +**crypto rand** |
| 65 | +> Generate random bytes or strings. |
| 66 | +
|
| 67 | +**crypto certificate** rsa|ecdsa|ed25519 |
| 68 | +> Generate self-signed certificates. |
| 69 | +
|
| 70 | +**crypto totp generate** |
| 71 | +> Generate TOTP secret and QR code. |
| 72 | +
|
| 73 | +# PARAMETERS |
| 74 | + |
| 75 | +**--config**, **-c** _path_ |
| 76 | +> Path to configuration file(s). |
| 77 | +
|
| 78 | +**--password** |
| 79 | +> Read password interactively. |
| 80 | +
|
| 81 | +**--length** _n_ |
| 82 | +> Length for random generation. |
| 83 | +
|
| 84 | +**--issuer** _name_ |
| 85 | +> TOTP issuer name. |
| 86 | +
|
| 87 | +**--algorithm** _algo_ |
| 88 | +> Hashing or encryption algorithm. |
| 89 | +
|
| 90 | +**--help**, **-h** |
| 91 | +> Display help information. |
| 92 | +
|
| 93 | +**--version** |
| 94 | +> Display version information. |
| 95 | +
|
| 96 | +# DESCRIPTION |
| 97 | + |
| 98 | +**authelia** is the CLI for Authelia, an open-source authentication and authorization server. It provides multi-factor authentication and single sign-on for applications behind a reverse proxy. |
| 99 | + |
| 100 | +The **crypto** commands generate secrets, password hashes, certificates, and TOTP configurations needed for Authelia setup. Use **crypto hash generate argon2** to create password hashes for the user database. |
| 101 | + |
| 102 | +Configuration validation with **validate-config** checks YAML syntax and setting values before deployment. This catches common configuration errors. |
| 103 | + |
| 104 | +The **storage** commands manage the user database, including migrations between versions and encryption key rotation. Authelia stores user credentials, TOTP secrets, and session data. |
| 105 | + |
| 106 | +Authelia integrates with reverse proxies like Nginx, Traefik, and HAProxy to protect web applications with authentication portals and access policies. |
| 107 | + |
| 108 | +# CAVEATS |
| 109 | + |
| 110 | +Authelia runs as a service behind a reverse proxy; the CLI is for configuration and utilities. Requires proper reverse proxy configuration for authentication flow. User database and session storage must be configured. Some features require Redis for session storage in HA deployments. |
| 111 | + |
| 112 | +# HISTORY |
| 113 | + |
| 114 | +Authelia was created by **Clement Michaud** in **2016** as a simple authentication portal. The project evolved to support multiple second-factor methods (TOTP, WebAuthn, Duo) and advanced access control. Version 4 brought major architectural improvements and became widely adopted for self-hosted authentication. The project emphasizes security, privacy, and ease of deployment with container-first design. |
| 115 | + |
| 116 | +# SEE ALSO |
| 117 | + |
| 118 | +[authentik](/man/authentik)(1), [keycloak](/man/keycloak)(1), [nginx](/man/nginx)(1), [traefik](/man/traefik)(1) |
0 commit comments