Authelia is an open-source authentication and authorization server providing 2-factor authentication and single sign-on (SSO) for your applications via a web portal. It acts as a companion of reverse proxies like nginx, Traefik or HAProxy to let them know whether queries should pass through. Unauthenticated users are redirected to Authelia Sign-in portal instead.

Documentation is available at

The architecture is shown in the diagram below.

Authelia can be installed as a standalone service from the AUR, FreeBSD Ports, or using a Static binary, Docker or Kubernetes leveraging ingress controllers and ingress configurations. Assistance to publish a debian package would be greatly appreciated.