We provide a concrete implementation for the most common homelab scenario: protecting multiple web services behind nginx or Traefik.
services: authelia: image: authelia/authelia:latest container_name: authelia restart: unless-stopped volumes: - ./config:/config networks: - proxy_network environment: - TZ=America/New_York labels: - "traefik.enable=false" # We'll use NPM, not Traefik homelab 2fa
(an unofficial Bitwarden server) to store your 2FA seeds and recovery codes securely within your own lab. 5. Best Practices & Pitfalls The "Lockout" Plan: Always generate and print recovery codes We provide a concrete implementation for the most
Unbreakable. No web exposure. Cons: Inconvenient for quick phone access. No "share with a friend" capability. homelab 2fa
To achieve "2FA all the things," focus on these four primary entry points: Edge Access: