SALA/D Setup

Instructions to set up the SALA/D Part of the stack.

Overview of the SALA/D Stack:

The SALA/D stack, or SWAG, Authelia, LLDAP, Authy/Duo stack is a simple way to get a webserver/reverse proxy, an identity and access control management system, as well as 2FA; all working together to host whatever you'd like. Here is what does what:

• Swag

  • Handles the webserver and reverse proxy.
  • All configuration is handled via .conf files and text
  • This guide also demonstrates how to set up the Docker Mods Auto Reload, GeoIPBlock, and ...

• Authelia

  • Handles weblogin and the front end of 2FA.
  • This has one configuration file, and hooks into LLDAP.

• LLDAP

  • Handles the "identity" part of the Authentication solution.
  • Requires that a domain is setup, and has a bit of a learning curve.
  • This has a bit of configuration involved whenever you setup a new application with LDAP integrations, however, LLDAP's GitHub page usually has sample configurations on how to setup LDAP auth for an application.

• Authy/Duo

  • Pick one between Authy or Duo
    • Authy
      • This allows for 2FA via an 8 digit code. The configuration is handled via Authelia, with the end user setting up 2FA through the Authy App or through Bit/Vaultwarden. The user can self register their 2FA in this way, through email.
    • Duo
      • This allows for 2FA via a push notification on your phone. The configuration is handled via Authelia.