Authelia on Ubuntu 24.04 LTS

What's included

• Authelia installed from the official upstream source
• Ubuntu 24.04 LTS base with automatic security updates enabled
• No shared or default passwords — a unique admin credential is generated on your VM at first boot
• Trusted Launch support: Secure Boot + vTPM
• Azure Monitor Agent, Defender for Cloud, and Update Manager install cleanly

Quick start

1. Deploy from the Azure Marketplace (Get It Now → Create), choosing your SSH key at the Administration step.
2. Allow inbound SSH (22) for yourself plus the application port(s): 9091 (portal, HTTPS) — to your reverse proxy and your own IP — restrict to your own IP where possible. The in-image firewall already allows them; only the Network Security Group (NSG) keeps them closed.
3. Open the portal address from the credential file (https://<dashed-public-ip>.sslip.io:9091/) and sign in as admin (see First login below).
4. Point your reverse proxy's forward-auth at the portal and add an access_control rule per protected application; the default policy is deny. `authelia-set-domain` rebuilds /etc/authelia/configuration.yml from /etc/authelia/configuration.template.yml whenever the portal domain changes, so keep lasting changes such as access_control rules in the template too (read from the image's script).

Get your admin password (one time)

ssh <your-username>@<VM-IP>
sudo cat /root/authelia-admin-credentials.txt

Sign in as admin at the HTTPS portal address in the file (an sslip.io name for the VM's public IP until you run `sudo authelia-set-domain <your domain>`). Expect a certificate warning on the first visit: the certificate is self-signed.